We just recently enabled SSO integration with Okta to try and take advantage of Okta MFA. Everything seems to work fine but the ADSSP Client. When attempting to use the client utility from a locked Windows machine, users are getting the following error:

I'm assuming I need to enable external URL access, but can't seem to find a setting for that in any of the docs/articles I've found so far. Like I mentioned before, this works fine if a user goes to the web app and unlocks/resets password, it's just this client now that giving us issues. If it makes a difference, we are deploying this client via SCCM. Any help is greatly appreciated!