When no session exists, the authentication process is triggered by a login request. and the fact that FE user groups may be locked to a given domain). When developing your own "auth" services, the chances are high that you will want to .