Directly authenticate in a given tenant.

If a tenant name is provided, then authentication will be done
directly in that tenant.  Only if no tenant has been provided, an
unscoped token will be used and authentication will subsequently be
done in the first accessible tenant.