That actually worked!I added api to the scopes of the connected app and the default scopes of the authentication providers.That caused the “allow access” dialog to popup when I reloaded my test page:
