Continue with Google (real upstream)
Enter the email the upstream IdP would have asserted (email_verified is forced true here).
requested scope: openid requested resource: