This binding only needs to happen when `! singleInstitutionalAuth`