title: Okta Authentication and OAuth to secure API
body: <p>I'm creating an Android application for my employee that will require the sales people to login using Okta authentication (I plan on using their authentication api).  My question is on how to secure the WEB API my code will be calling from the android app.  Should I use Okta's OAuth implementation to do this? </p>
  
  <p>What I was thinking was if I use Okta's authentication (to have them login), I can also call the OAuth API to retrieve a token and then an access token. I could then lock down the API by checking the access token I received from Okta.  </p>
  
  <p>Do you think this is the best way to do this using Okta?</p>
  
  <p>Thanks!</p>