Best way to find the proper curl version of a command is to use the Vault binary:
$ vault list -output-curl-string auth/okta/users
curl -H "X-Vault-Request: true" -H "X-Vault-Token: $(vault print token)" https://vault:8200/v1/auth/okta/users?list=true