“Start” saves the provider, redirects to it for login, and inspects whatever comes back. The redirect URI must be registered with the provider.