Provider sign-in required

The pipeline is loaded only from the tenant-scoped API.