Okta allowing login bypass for any usernames with 52+ characters is insane Official Security Advisory: https://trust.okta.com/security-advisories/okta-ad-ldap-delegated-authentication-username/
See Tweet