Self-hosted. Access is restricted to authorized accounts.
One-time step: create an OAuth app on the provider's console, paste its Client ID & Secret below, Save, then click Connect. When registering, add these redirect URLs: