Self resolved. The callbacks signIn does not control sign-in, it is a callback that is executed when sign-in is performed. It also appears that it is not something that can be used with OAuth.