Adding some notes to make sure we don't get lost.
Authentication flow does start with a form - that which offers choices for identity providers.
A login 'form' for the purpose of testing.
Looks like URLs are set up, but there's a 401. May be due to currently incomplete specification in settings file.