Authorize a service

Start PKCE OAuth from a valid connect session in the hosted connect UI

Starts PKCE OAuth from a valid connect session. The hosted connect UI calls this endpoint; a SaaS API key is not accepted from the browser.