With SAML and Okta, there would need to be one Okta app set up for each hospital to redirect the login to the correct SmartPACS system. This is the expected design and operation of SSO with SAML. Unfortunately this is not scalable and OIDC (OpenID Connect) should be implemented as another way to support for SSO.