I set up Guard and passed int a group from okta to be provisioned and the accounts are synced but the default policy for SSO is not picking up the accounts and I can't find anything that would say why not.
