diff --git a/test/Makefile.am b/test/Makefile.am
index feb84a65..e40088ff 100644
--- a/test/Makefile.am
+++ b/test/Makefile.am
@@ -472,6 +472,7 @@ static_data = \
 	data/auth/anonymous-server-successful.auth-script \
 	data/auth/cancel.auth-script \
 	data/auth/client-out-of-mechanisms.auth-script \
+	data/auth/external-auto.auth-script \
 	data/auth/external-failed.auth-script \
 	data/auth/external-root.auth-script \
 	data/auth/external-silly.auth-script \
diff --git a/test/data/auth/external-auto.auth-script b/test/data/auth/external-auto.auth-script
new file mode 100644
index 00000000..ddef4e1e
--- /dev/null
+++ b/test/data/auth/external-auto.auth-script
@@ -0,0 +1,18 @@
+# Test that we can authenticate with an empty authorization identity
+SERVER
+EXPECT_HAVE_NO_CREDENTIALS
+
+# C: "I want to use EXTERNAL, I decline to specify an initial response"
+SEND 'AUTH EXTERNAL'
+# S: "OK, who do you claim to be?"
+EXPECT_COMMAND DATA
+EXPECT_STATE WAITING_FOR_INPUT
+EXPECT_HAVE_NO_CREDENTIALS
+# C: "I am whoever the kernel says I am"
+SEND 'DATA'
+# S: "I suppose I can't argue with that"
+EXPECT_COMMAND OK
+EXPECT_STATE WAITING_FOR_INPUT
+SEND 'BEGIN'
+EXPECT_STATE AUTHENTICATED
+EXPECT_HAVE_SOME_CREDENTIALS