Hi RK,
Once Okta authenticates the user, AEM only uses the token during that initial handshake. After that, AEM creates its own session and sets a secure login-token cookie in the browser.
That cookie is sent with every request, so AEM knows the user is logged in — no need to go back to Okta each ti...