Configurable direct auth strategy