With enforce_second_factor_on_external_auth enabled, if a user attempts to log in via social auth they get to this screen:
enforce_second_factor_on_external_auth
But the option to log in via passkey is missing. It should be added to this screen.