Microsoft acted too late on major security threat, Okta exec says