We are onboarding an OIDC external identity provider onto Okta and we need to have access to their tokens from the log in in addition to ours for access to their APIs. Is there any way to retrieve them through the automatic OIDC External Identity Provider process?
If the users logged into Okta through an OIDC provider, an admin can access their tokens via this API call, GET /api/v1/idps/${idpId}/users/${userId}/credentials/tokens, see Identity Providers | Okta Developer