Lets start with the basics as you havent provided much information about your configuration....

Do you want every user to be made an admin? If so, have you enabled this selection in your config?

Where can I download this config app?
edit: got it - it´s in the connect download dmg :-) 

So for the current plist we have setup we have it like this not sure if there is something in the plist that is blocking some of the features but we have OIDC ignore admin which should ignore all rules in okta and make the user an admin account 

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>AllowNetworkSelection</key>
<true/>
<key>DenyLocal</key>
<true/>
<key>OIDCProvider</key>
<string>Okta-OIDC</string>
<key>OIDCRedirectURI</key>
<string>https://127.0.0.1/jamfconnect</string>
<key>OIDCDiscoveryURL</key>
<string>https://amplify-admin.okta.com/.well-known/openid-configuration</string>
<key>OIDCClientID</key>
<string>0oa2p6qze5Bv2NZN62p7</string>
<key>OIDCROPGID</key>
<string>0oa2p6qze5Bv2NZN62p7</string>
<key>OIDCTenant</key>
<string>https://amplify.okta.com/oauth2/default</string>
<key>OIDCUsePassthroughAuth</key>
<true/>
<key>OIDCNewPassword</key>
<false/>
<key>CreateJamfConnectPassword</key>
<true/>
<key>BackgroundImage</key>
<string>/usr/local/jamfconnectbranding/images/blackbackground.png</string>
<key>LoginLogo</key>
<string>/usr/local/jamfconnectbranding/images/Amplify LOGO.ai.pdf</string>
<key>HelpURL</key>
<string>https://amplify.okta.com/enduser/settings</string>
<key>LocalFallback</key>
<true/>
<key>EnableFDE</key>
<true/>
<key>DisableUpdateWatcher</key>
<true/>
<key>EULASubTitle</key>
<string>Amplify</string>
<key>EULAText</key>
<string>END USER LICENSE AGREEMENT</string>
<key>EULATitle</key>
<string>End User License Agreement</string>
<array>
<string>Admin</string>
</array>
<key>OIDCIgnoreAdmin</key>
<true/>
</dict>
</plist>