In the specific case of AWS and Okta, I cannot find tools / scripts that work, though there are plenty that work in similar-but-not-identical scenarios (e.g. saml2aws, aws-creds-okta-action).

I'm finding it pretty weird that what I'd consider the core use case of something like Okta isn't documented at all... I must be using the wrong search terms or something...