I want to understand how Okta handles SSO between Native App and a web application let’s say any SPA. My SPA app is also using Okta for authentication and Native App is also going to use standard PKCE flow. We are going to open a SPA App in IOS embedded web view for native apps (SFSafariViewController). I don’t want user to login again on SPA if user has already autheticated via native app using OAuth PKCE flow using Okta AppAuth SDK.