There is but as far as I know you cannot have it send them to login.gov if they fail to authenticate with Okta. You can set things up so that when they use Okta or login.gov that they system will allow it if the users account is set to use that authentication provider. You can set an account to use a specific auth provider so if they do not know which to use they can go to the instance URL and it will ask them for there ID and once they enter it the system will direct them to the correct auth provider and it will leave behind a cookie so the next time it will just redirect them without asking for there user id.
