diff --git a/sandbox/OpenIddict.Sandbox.AspNet.Server/Controllers/AuthorizationController.cs b/sandbox/OpenIddict.Sandbox.AspNet.Server/Controllers/AuthorizationController.cs
index 605f511a..274faf01 100644
--- a/sandbox/OpenIddict.Sandbox.AspNet.Server/Controllers/AuthorizationController.cs
+++ b/sandbox/OpenIddict.Sandbox.AspNet.Server/Controllers/AuthorizationController.cs
@@ -16,13 +16,13 @@ using Microsoft.AspNet.Identity;
 using Microsoft.AspNet.Identity.Owin;
 using Microsoft.Owin.Security;
 using OpenIddict.Abstractions;
+using OpenIddict.Client;
 using OpenIddict.Client.Owin;
 using OpenIddict.Sandbox.AspNet.Server.Helpers;
 using OpenIddict.Sandbox.AspNet.Server.ViewModels.Authorization;
 using OpenIddict.Server.Owin;
 using Owin;
 using static OpenIddict.Abstractions.OpenIddictConstants;
-using static OpenIddict.Client.WebIntegration.OpenIddictClientWebIntegrationConstants;
 
 namespace OpenIddict.Sandbox.AspNet.Server.Controllers
 {
@@ -30,15 +30,18 @@ namespace OpenIddict.Sandbox.AspNet.Server.Controllers
     {
         private readonly IOpenIddictApplicationManager _applicationManager;
         private readonly IOpenIddictAuthorizationManager _authorizationManager;
+        private readonly OpenIddictClientService _clientService;
         private readonly IOpenIddictScopeManager _scopeManager;
 
         public AuthorizationController(
             IOpenIddictApplicationManager applicationManager,
             IOpenIddictAuthorizationManager authorizationManager,
+            OpenIddictClientService clientService,
             IOpenIddictScopeManager scopeManager)
         {
             _applicationManager = applicationManager;
             _authorizationManager = authorizationManager;
+            _clientService = clientService;
             _scopeManager = scopeManager;
         }
 
@@ -60,7 +63,9 @@ namespace OpenIddict.Sandbox.AspNet.Server.Controllers
                 // that will be used to authenticate the user, the identity_provider parameter can be used for that.
                 if (!string.IsNullOrEmpty(request.IdentityProvider))
                 {
-                    if (!string.Equals(request.IdentityProvider, Providers.GitHub, StringComparison.Ordinal))
+                    var registrations = await _clientService.GetClientRegistrationsAsync();
+                    if (!registrations.Any(registration => string.Equals(registration.ProviderName,
+                        request.IdentityProvider, StringComparison.Ordinal)))
                     {
                         context.Authentication.Challenge(
                             authenticationTypes: OpenIddictServerOwinDefaults.AuthenticationType,
diff --git a/sandbox/OpenIddict.Sandbox.AspNetCore.Server/Controllers/AuthorizationController.cs b/sandbox/OpenIddict.Sandbox.AspNetCore.Server/Controllers/AuthorizationController.cs
index fbfef061..6c43cfce 100644
--- a/sandbox/OpenIddict.Sandbox.AspNetCore.Server/Controllers/AuthorizationController.cs
+++ b/sandbox/OpenIddict.Sandbox.AspNetCore.Server/Controllers/AuthorizationController.cs
@@ -14,13 +14,13 @@ using Microsoft.AspNetCore.Mvc;
 using Microsoft.Extensions.Primitives;
 using Microsoft.IdentityModel.Tokens;
 using OpenIddict.Abstractions;
+using OpenIddict.Client;
 using OpenIddict.Client.AspNetCore;
 using OpenIddict.Sandbox.AspNetCore.Server.Helpers;
 using OpenIddict.Sandbox.AspNetCore.Server.Models;
 using OpenIddict.Sandbox.AspNetCore.Server.ViewModels.Authorization;
 using OpenIddict.Server.AspNetCore;
 using static OpenIddict.Abstractions.OpenIddictConstants;
-using static OpenIddict.Client.WebIntegration.OpenIddictClientWebIntegrationConstants;
 
 namespace OpenIddict.Sandbox.AspNetCore.Server;
 
@@ -28,6 +28,7 @@ public class AuthorizationController : Controller
 {
     private readonly IOpenIddictApplicationManager _applicationManager;
     private readonly IOpenIddictAuthorizationManager _authorizationManager;
+    private readonly OpenIddictClientService _clientService;
     private readonly IOpenIddictScopeManager _scopeManager;
     private readonly SignInManager<ApplicationUser> _signInManager;
     private readonly UserManager<ApplicationUser> _userManager;
@@ -35,12 +36,14 @@ public class AuthorizationController : Controller
     public AuthorizationController(
         IOpenIddictApplicationManager applicationManager,
         IOpenIddictAuthorizationManager authorizationManager,
+        OpenIddictClientService clientService,
         IOpenIddictScopeManager scopeManager,
         SignInManager<ApplicationUser> signInManager,
         UserManager<ApplicationUser> userManager)
     {
         _applicationManager = applicationManager;
         _authorizationManager = authorizationManager;
+        _clientService = clientService;
         _scopeManager = scopeManager;
         _signInManager = signInManager;
         _userManager = userManager;
@@ -99,7 +102,9 @@ public class AuthorizationController : Controller
             // that will be used to authenticate the user, the identity_provider parameter can be used for that.
             if (!string.IsNullOrEmpty(request.IdentityProvider))
             {
-                if (!string.Equals(request.IdentityProvider, Providers.GitHub, StringComparison.Ordinal))
+                var registrations = await _clientService.GetClientRegistrationsAsync();
+                if (!registrations.Any(registration => string.Equals(registration.ProviderName,
+                    request.IdentityProvider, StringComparison.Ordinal)))
                 {
                     return Forbid(
                         authenticationSchemes: OpenIddictServerAspNetCoreDefaults.AuthenticationScheme,