Am I thinking about this correctly? I’ve tried everything to make it work: in order to login, the user needs to get through the username+password form and also have the correct role