If the authentication session is long-lived then this is usually not too onerous; one round trip the first time you use it.

It’s a nightmare if they also insist on short lived sessions.