Hi @matant, if you have enabled it on only one organization instead of on the whole instance you need to send the organization id scope in the authorization request, so ZITADEL knows which policy to trigger. https://docs.zitadel.com/docs/apis/openidoauth/scopes#reserved-scopes
If you are going directly to the link you sent, you will not see the provider, because the login policy of the instance is triggered, but as I understood you, you have configured it on the organization.
You can either configure it on the instance and you will see it always. or you need to send the scope urn:zitadel:iam:org{id} in your authorization request