Use explicit SP-auth URL with "check" action.