For reference as I forgot this in the first post - We are on UEM 2007

For Hub Services I access that normally though the the UEM apps menu (9 dots at the top right) then I am forwarded to our DOMAIN.workspaceoneaccess.com/catalog-portal/admin-console#/uem

If that is the right area that you are speaking of then it is configured as follows and does not seem to have a way to change or update the settings.

Under Workspace ONE Hub Services - System Settings we don't seem to have any way to change it. 
Currently this has only two things

• System Settings
  • Mobile Flows URL: Our URL
• UEM Integration
  • API URL: Our asXXXX.awmdm.com
  • API Certificate: Our Cert
  • Certificate Password: Our Password
  • Admin API Key: Our API Key
  • Group ID: Our top OG
  • Device Services URL: Our dsXXXX.awmdm.com/DeviceServices

We also have the Airwatch app and the AirWatch Provisioning Applications both configured in ACCESS and with the same groups assigned to them.

In UEM we are configured to use SAML and that is pointing to ACCESS.

For our second issue is all that is needed here is to switch the Okta group type then re-sync those groups?  I will have to check with our Okta admin to be sure but I would bet we are using the assignment groups.