I’ve used the saml tracer extension , nothing stands out. Also it works over one hop. Okta to aad or okta to okta.
If someone else has set up a similar IdP scenario where they go Okta → Okta → Azure maybe they can point out what needs to be configured .