FortiSASE SPA OKTA

Good morning community

We are deploying FortiSASE SPA (no SIA now) and we don't seem to find the ways of doing MFA authentication. We are planning to use OKTA , but it seems that OKTA and SAML in general is only for SPA.

Is this correct? Have anyone deployed SPA using OKTA or something similar?