Consider also when auth modes are multiple: External and Internal