Following documentation Configure vCenter Server Identity Provider Federation for Okta fails after Step 2.
vCenter Server 8 U1 or later
vCenter root password is expired.
Follow KB Changing or Resetting the root password in vCenter Server Appliance to reset the vCenter root password.