docs: private static String federatedFlowStep4(
        LoginInput loginInput,
        String ssoUrl,
        String oneTimeToken) throws SnowflakeSQLException
    {
      String responseHtml = "";
      try
      {
  
        final URL url = new URL(ssoUrl);
        URI oktaGetUri = new URIBuilder()
            .setScheme(url.getProtocol())
            .setHost(url.getHost())
            .setPath(url.getPath())
            .setParameter("RelayState", "%2Fsome%2Fdeep%2Flink")
            .setParameter("onetimetoken", oneTimeToken).build();
        HttpGet httpGet = new HttpGet(oktaGetUri);
  
        HeaderGroup headers = new HeaderGroup();
        headers.addHeader(new BasicHeader(HttpHeaders.ACCEPT, "*/*"));
        httpGet.setHeaders(headers.getAllHeaders());
  
        responseHtml = HttpUtil.executeRequest(httpGet,
                                               loginInput.getLoginTimeout(), 0, null);
  
        // step 5
        String postBackUrl = getPostBackUrlFromHTML(responseHtml);
        if (!isPrefixEqual(postBackUrl, loginInput.getServerUrl()))
        {
          logger.debug("The specified authenticator {} and the destination URL " +
                       "in the SAML assertion {} do not match.",
                       loginInput.getAuthenticator(), postBackUrl);
          throw new SnowflakeSQLException(
              SqlState.SQLCLIENT_UNABLE_TO_ESTABLISH_SQLCONNECTION,
              ErrorCode.IDP_INCORRECT_DESTINATION.getMessageCode());
        }
      }
      catch (IOException | URISyntaxException ex)
      {
        handleFederatedFlowError(loginInput, ex);
      }
      return responseHtml;
    }