[BrandonSmith]

Some authenticate (Google comes to mind) allows for delegation to third party scenarios. So, similarly, knowing the account is necessary to determine the next step.