Redeem a plex token, check it's access to resources against what's allowed for the source, and redirect to an authentication/enrollment flow.