Firstly you should move

cy.intercept('GET', '/api/v1/oktaConfig').as('exp')

outside of your function, as you are declaring it too late (after this click/submit is too late). i.e.

cy.intercept('GET', '/api/v1/oktaConfig').as('exp')
Cypress.Commands.add('login', (username, password) => {
...