We have enabled OKTA SSO with Salesforce. Once we assign OKTA permission set (with Permission Is Single Sign On Enabled) to user, it cannot login into SF using its credentials. It has to login into Okta and then user can access SF. This is perfect but we have instances where we want 3rd party apps like Workbench or even a community to allow the user login. Currently if we pass the credentials to these 3rd party apps, even they are restricted due to the SSO.
Can anyone please help me with this. I guess maybe I am missing any setting on OKTA setup?