Right now when using external auth, you need to "just know" to come to the UI and start the flow. There have been comments on #815 asking to automatically enable the flow but an inbetween that seems like a good idea is to simply pop an OS notification that authentication is required so the user can decide if they care or not.