Start on endpoint-specific authorization