Add Okta idp federation

Having issue with adding a okta federated idp, i can add the idp just fine, and i can auth to okta, then redirects back to the serverless-pdf-chat, that all works, and the user is also created in the user pool by Okta. The problem is when the user tries to authenticate after cognito creates the user it gets a user doesn't exist message, but it's clearly there. I think it's hung up on the confirmation status, as it is External provider, and the email is not verified. Anyone have any thoughts on this?