If you are making an async call to another API after the user authenticates, Why not just use a post-login action? It's what it is designed for. Or, if this should only occur during a registration flow, better yet -- a post-registration action.
post-login
post-registration