add okta role and entra role sections

Author: DeCohen

ATPDocs/okta-integration.md

@@ -10,6 +10,9 @@ ms. reviewer: Himanch
 
 This page explains how to connect Microsoft Defender for Identity to your Okta account using the Unified Connectors experience. This connection provides visibility into Okta activity and enables shared data collection across Microsoft security products. The Unified Connectors experience allows Defender for Identity to collect Okta system logs once and share them with other supported Microsoft security products, such as Microsoft Sentinel. This reduces API usage, avoids duplicate data collection, and simplifies connector management. For more information, see [Unified connectors overview](/azure/sentinel/unified-connector?branch=pr-en-us-302665#unified-collector-service).
 
+> [!NOTE]
+> If your Okta environment is already integrated with [Microsoft Defender for Cloud Apps](/defender-cloud-apps/protect-okta), connecting it to Microsoft Defender for Identity can cause duplicate Okta data, such as user activity, to appear in the Defender portal.
+
 ## Prerequisites
 
 Before connecting your Okta account to Microsoft Defender for Identity, make sure the following prerequisites are met:
@@ -20,11 +23,13 @@ Your Okta environment must have one of the following licenses:
 
 - Enterprise
 
-> [!NOTE]
-> - The Super Admin role is required only to create the API token. After you create the token, remove the role and assign the Read-Only Administrator and Defender for Identity custom roles for ongoing API access.
-> - If your Okta environment is already integrated with [Microsoft Defender for Cloud Apps](/defender-cloud-apps/protect-okta), connecting it to Microsoft Defender for Identity can cause duplicate Okta data, such as user activity, to appear in the Defender portal.
 
-## Required Microsoft Entra roles
+### Okta roles 
+
+The Super Admin role is required only to create the API token. After you create the token, remove the role and assign the Read-Only Administrator and Defender for Identity custom roles for ongoing API access.
+
+
+## Microsoft Entra roles
 
 To successfully set up the Okta connector, ensure that your account has one of the following Microsoft Entra roles assigned: