diff --git a/packages/core-api/src/apis/implementations/auth/onelogin/OktaAuth.test.ts b/packages/core-api/src/apis/implementations/auth/onelogin/OktaAuth.test.ts
deleted file mode 100644
index d6b1a07d9d..0000000000
--- a/packages/core-api/src/apis/implementations/auth/onelogin/OktaAuth.test.ts
+++ /dev/null
@@ -1,61 +0,0 @@
-/*
- * Copyright 2020 Spotify AB
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-import OktaAuth from './OktaAuth';
-import MockOAuthApi from '../../OAuthRequestApi/MockOAuthApi';
-import { UrlPatternDiscovery } from '../../DiscoveryApi';
-
-const PREFIX = 'okta.';
-
-const getSession = jest.fn();
-
-jest.mock('../../../../lib/AuthSessionManager', () => ({
-  ...(jest.requireActual('../../../../lib/AuthSessionManager') as any),
-  RefreshingAuthSessionManager: class {
-    getSession = getSession;
-  },
-}));
-
-describe('OktaAuth', () => {
-  afterEach(() => {
-    jest.resetAllMocks();
-  });
-
-  it.each([
-    ['openid', ['openid']],
-    ['profile email', ['profile', 'email']],
-    [`${PREFIX}groups.manage`, [`${PREFIX}groups.manage`]],
-    ['groups.read', [`${PREFIX}groups.read`]],
-    [
-      `${PREFIX}groups.manage groups.read, openid`,
-      [`${PREFIX}groups.manage`, `${PREFIX}groups.read`, 'openid'],
-    ],
-    [`email\t ${PREFIX}groups.read`, ['email', `${PREFIX}groups.read`]],
-
-    // Some incorrect scopes that we don't try to fix
-    [`${PREFIX}email`, [`${PREFIX}email`]],
-    [`${PREFIX}profile`, [`${PREFIX}profile`]],
-    [`${PREFIX}openid`, [`${PREFIX}openid`]],
-  ])(`should normalize scopes correctly - %p`, (scope, scopes) => {
-    const auth = OktaAuth.create({
-      oauthRequestApi: new MockOAuthApi(),
-      discoveryApi: UrlPatternDiscovery.compile('http://example.com'),
-    });
-
-    auth.getAccessToken(scope);
-    expect(getSession).toHaveBeenCalledWith({ scopes: new Set(scopes) });
-  });
-});
diff --git a/plugins/auth-backend/package.json b/plugins/auth-backend/package.json
index 6489c8547d..7266395c78 100644
--- a/plugins/auth-backend/package.json
+++ b/plugins/auth-backend/package.json
@@ -45,6 +45,7 @@
     "passport-microsoft": "^0.1.0",
     "passport-oauth2": "^1.5.0",
     "passport-okta-oauth": "^0.0.1",
+    "passport-onelogin-oauth": "^0.0.1",
     "passport-saml": "^1.3.3",
     "uuid": "^8.0.0",
     "winston": "^3.2.1",
diff --git a/yarn.lock b/yarn.lock
index b2b87be5e0..4d1a4cd856 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -17915,6 +17915,15 @@ passport-okta-oauth@^0.0.1:
     pkginfo "0.2.x"
     uid2 "0.0.3"
 
+passport-onelogin-oauth@^0.0.1:
+  version "0.0.1"
+  resolved "https://registry.npmjs.org/passport-onelogin-oauth/-/passport-onelogin-oauth-0.0.1.tgz#6e991ac6720783fdd80d4caa08c36cc71ef19962"
+  integrity sha512-EXFBqlJdHf5AX4QaiZsLfhgQUOR6z3zGA5479SUJF4I4rnAt7yasZEbs27pg8MRiQh/uLZEWLGMoVXr6LHV9mQ==
+  dependencies:
+    passport-oauth "1.0.0"
+    pkginfo "0.2.x"
+    uid2 "0.0.3"
+
 passport-saml@^1.3.3:
   version "1.3.3"
   resolved "https://registry.npmjs.org/passport-saml/-/passport-saml-1.3.3.tgz#cbea1a2b21ff32b3bc4bfd84dc39c3a370df9935"