
The way that Okta does this is that it creates a "bookmark" which will effectively send the user to a SP url (no authentication), the SP recognizes that and redirects the user back to an IdP URL, that IdP URL initiates the authentication request to the SP.
Basically the flow is still initiated from the user in the IdP but the IdP will just throw the user to the SP and have it redirect back.