Samsung Phones have the option to sign in with a Samsung Account, and the user has the option to use an email address as the username and a password, or to actively tie that account to their gsuite account.
Go to crossco.okta.com and set up voice call authentication for a number besides the cell you are actively working with. Can use RC number here.
First, go to settings > accounts and remove everything except for the samsung account. This will stop the phone from being Google Security locked at a later stage.
If the Samsung account is tied to gsuite, you will need to remove that connection.
Please reference the following doc for full instructions on how to remove that Samsung account.
https://docs.google.com/document/d/1_MbnZ9F1CP1TUPTPiy3Es9cFLQwF48mJnMHdp2hZKEU/edit
Once the samsung account is no longer tied to the google account, you can remove it from the phone using it's password.
Factory reset the phone. Upon setup, connect to wifi, and for the google account use the first.last@jaking.com (there should not be a device lock if all accounts were removed as described above).
Complete okta sign in using the voice call authentication set-up earlier
During initial set-up accept all the Google prompts with their defaults.
The last stage of initial set-up will ask if this is a "Work Only" phone, or a personal and work phone. SELECT WORK ONLY IF THIS IS A CROSS PROVIDED PHONE.
Wait for set-up to complete and enjoy the phone. ;D