Which administrative authentication method supports authorization by an external service?