This was the best my google-fu and stack overflow could produce.  I'd be happy for other suggestions, but since there is a lengthy redirect chain to create and login an external auth user this seemed like the only way to get it out of a request/session object.