Local auth should go on the right. External auth should be on the left. Cfr. master