Register an authentication provider in ApplicationState. Cocoon-side providers (GitHub, Microsoft, etc.) call this on activation; later GetAuthenticationSession calls look up the registered handle.
ApplicationState
GetAuthenticationSession