diff --git a/src/Security/Authentication/Certificate/src/CertificateAuthenticationOptions.cs b/src/Security/Authentication/Certificate/src/CertificateAuthenticationOptions.cs
index 693dd5da942a..cdb6598cf62a 100644
--- a/src/Security/Authentication/Certificate/src/CertificateAuthenticationOptions.cs
+++ b/src/Security/Authentication/Certificate/src/CertificateAuthenticationOptions.cs
@@ -10,6 +10,14 @@ namespace Microsoft.AspNetCore.Authentication.Certificate;
 /// </summary>
 public class CertificateAuthenticationOptions : AuthenticationSchemeOptions
 {
+    /// <summary>
+    /// Initializes a new instance of <see cref="CertificateAuthenticationOptions"/>.
+    /// </summary>
+    public CertificateAuthenticationOptions()
+    {
+        Events = new CertificateAuthenticationEvents();
+    }
+
     /// <summary>
     /// Value indicating the types of certificates accepted by the authentication middleware.
     /// </summary>
diff --git a/src/Security/Authentication/JwtBearer/src/JwtBearerOptions.cs b/src/Security/Authentication/JwtBearer/src/JwtBearerOptions.cs
index f5b56ed32531..c4142a40da73 100644
--- a/src/Security/Authentication/JwtBearer/src/JwtBearerOptions.cs
+++ b/src/Security/Authentication/JwtBearer/src/JwtBearerOptions.cs
@@ -32,6 +32,7 @@ public JwtBearerOptions()
         SecurityTokenValidators = new List<ISecurityTokenValidator> { _defaultHandler };
 #pragma warning restore CS0618 // Type or member is obsolete
         TokenHandlers = new List<TokenHandler> { _defaultTokenHandler };
+        Events = new JwtBearerEvents();
     }
 
     /// <summary>
diff --git a/src/Security/Authentication/Negotiate/src/NegotiateOptions.cs b/src/Security/Authentication/Negotiate/src/NegotiateOptions.cs
index b170eeb6b7e4..b4fe727ad813 100644
--- a/src/Security/Authentication/Negotiate/src/NegotiateOptions.cs
+++ b/src/Security/Authentication/Negotiate/src/NegotiateOptions.cs
@@ -8,6 +8,14 @@ namespace Microsoft.AspNetCore.Authentication.Negotiate;
 /// </summary>
 public class NegotiateOptions : AuthenticationSchemeOptions
 {
+    /// <summary>
+    /// Initializes a new instance of <see cref="NegotiateOptions"/>.
+    /// </summary>
+    public NegotiateOptions()
+    {
+        Events = new NegotiateEvents();
+    }
+
     /// <summary>
     /// The object provided by the application to process events raised by the negotiate authentication handler.
     /// The application may use the existing NegotiateEvents instance and assign delegates only to the events it
diff --git a/src/Security/Authentication/Negotiate/test/Negotiate.Test/NegotiateHandlerTests.cs b/src/Security/Authentication/Negotiate/test/Negotiate.Test/NegotiateHandlerTests.cs
index 1d9ae1ae0356..df34ce9a84ad 100644
--- a/src/Security/Authentication/Negotiate/test/Negotiate.Test/NegotiateHandlerTests.cs
+++ b/src/Security/Authentication/Negotiate/test/Negotiate.Test/NegotiateHandlerTests.cs
@@ -20,6 +20,13 @@ namespace Microsoft.AspNetCore.Authentication.Negotiate;
 
 public class NegotiateHandlerTests
 {
+    [Fact]
+    public void EventsPropertyIsInitializedOnConstruction()
+    {
+        var options = new NegotiateOptions();
+        Assert.NotNull(options.Events);
+    }
+
     [Fact]
     public async Task Anonymous_MissingConnectionFeatures_ThrowsNotSupported()
     {
diff --git a/src/Security/Authentication/test/BearerTokenTests.cs b/src/Security/Authentication/test/BearerTokenTests.cs
index 08ee3bb8511e..d5aa657de398 100644
--- a/src/Security/Authentication/test/BearerTokenTests.cs
+++ b/src/Security/Authentication/test/BearerTokenTests.cs
@@ -23,4 +23,11 @@ protected override void RegisterAuth(AuthenticationBuilder services, Action<Bear
     {
         services.AddBearerToken(configure);
     }
+
+    [Fact]
+    public void EventsPropertyIsInitializedOnConstruction()
+    {
+        var options = new BearerTokenOptions();
+        Assert.NotNull(options.Events);
+    }
 }
diff --git a/src/Security/Authentication/test/CertificateTests.cs b/src/Security/Authentication/test/CertificateTests.cs
index 5e6d73eeca94..ba8e163539b3 100644
--- a/src/Security/Authentication/test/CertificateTests.cs
+++ b/src/Security/Authentication/test/CertificateTests.cs
@@ -22,6 +22,12 @@ namespace Microsoft.AspNetCore.Authentication.Certificate.Test;
 
 public class ClientCertificateAuthenticationTests
 {
+    [Fact]
+    public void EventsPropertyIsInitializedOnConstruction()
+    {
+        var options = new CertificateAuthenticationOptions();
+        Assert.NotNull(options.Events);
+    }
 
     [Fact]
     public async Task VerifySchemeDefaults()
diff --git a/src/Security/Authentication/test/CookieTests.cs b/src/Security/Authentication/test/CookieTests.cs
index bc9ff451415d..cb65ba5a6bae 100644
--- a/src/Security/Authentication/test/CookieTests.cs
+++ b/src/Security/Authentication/test/CookieTests.cs
@@ -32,6 +32,13 @@ protected override void RegisterAuth(AuthenticationBuilder services, Action<Cook
         services.AddCookie(configure);
     }
 
+    [Fact]
+    public void EventsPropertyIsInitializedOnConstruction()
+    {
+        var options = new CookieAuthenticationOptions();
+        Assert.NotNull(options.Events);
+    }
+
     [Fact]
     public async Task NormalRequestPassesThrough()
     {
diff --git a/src/Security/Authentication/test/FacebookTests.cs b/src/Security/Authentication/test/FacebookTests.cs
index 5ff71c3efe8e..34e731324419 100644
--- a/src/Security/Authentication/test/FacebookTests.cs
+++ b/src/Security/Authentication/test/FacebookTests.cs
@@ -42,6 +42,13 @@ protected override void ConfigureDefaults(FacebookOptions o)
         o.SignInScheme = "auth1";
     }
 
+    [Fact]
+    public void EventsPropertyIsInitializedOnConstruction()
+    {
+        var options = new FacebookOptions();
+        Assert.NotNull(options.Events);
+    }
+
     [Fact]
     public async Task ThrowsIfAppIdMissing()
     {
diff --git a/src/Security/Authentication/test/GoogleTests.cs b/src/Security/Authentication/test/GoogleTests.cs
index 276284020cbe..5d8e550ed644 100644
--- a/src/Security/Authentication/test/GoogleTests.cs
+++ b/src/Security/Authentication/test/GoogleTests.cs
@@ -42,6 +42,13 @@ protected override void ConfigureDefaults(GoogleOptions o)
         o.SignInScheme = "auth1";
     }
 
+    [Fact]
+    public void EventsPropertyIsInitializedOnConstruction()
+    {
+        var options = new GoogleOptions();
+        Assert.NotNull(options.Events);
+    }
+
     [Fact]
     public async Task ChallengeWillTriggerRedirection()
     {
diff --git a/src/Security/Authentication/test/JwtBearerTests.cs b/src/Security/Authentication/test/JwtBearerTests.cs
index 3238e6d63c79..7e0ec0dab593 100755
--- a/src/Security/Authentication/test/JwtBearerTests.cs
+++ b/src/Security/Authentication/test/JwtBearerTests.cs
@@ -33,15 +33,14 @@ public class JwtBearerTests : SharedAuthenticationTests<JwtBearerOptions>
 
     protected override void RegisterAuth(AuthenticationBuilder services, Action<JwtBearerOptions> configure)
     {
-        services.AddJwtBearer(o =>
-        {
-            ConfigureDefaults(o);
-            configure.Invoke(o);
-        });
+        services.AddJwtBearer(configure);
     }
 
-    private void ConfigureDefaults(JwtBearerOptions o)
+    [Fact]
+    public void EventsPropertyIsInitializedOnConstruction()
     {
+        var options = new JwtBearerOptions();
+        Assert.NotNull(options.Events);
     }
 
     [Fact]
diff --git a/src/Security/Authentication/test/MicrosoftAccountTests.cs b/src/Security/Authentication/test/MicrosoftAccountTests.cs
index 91e9fa4e9f1a..97517451fa14 100644
--- a/src/Security/Authentication/test/MicrosoftAccountTests.cs
+++ b/src/Security/Authentication/test/MicrosoftAccountTests.cs
@@ -43,6 +43,13 @@ protected override void ConfigureDefaults(MicrosoftAccountOptions o)
         o.SignInScheme = "auth1";
     }
 
+    [Fact]
+    public void EventsPropertyIsInitializedOnConstruction()
+    {
+        var options = new MicrosoftAccountOptions();
+        Assert.NotNull(options.Events);
+    }
+
     [Fact]
     public async Task ChallengeWillTriggerApplyRedirectEvent()
     {
diff --git a/src/Security/Authentication/test/OAuthTests.cs b/src/Security/Authentication/test/OAuthTests.cs
index 43463f2e15bf..3349ae96b6ec 100644
--- a/src/Security/Authentication/test/OAuthTests.cs
+++ b/src/Security/Authentication/test/OAuthTests.cs
@@ -31,6 +31,13 @@ protected override void RegisterAuth(AuthenticationBuilder services, Action<OAut
         });
     }
 
+    [Fact]
+    public void EventsPropertyIsInitializedOnConstruction()
+    {
+        var options = new OAuthOptions();
+        Assert.NotNull(options.Events);
+    }
+
     [Fact]
     public async Task ThrowsIfClientIdMissing()
     {
diff --git a/src/Security/Authentication/test/OpenIdConnect/OpenIdConnectTests.cs b/src/Security/Authentication/test/OpenIdConnect/OpenIdConnectTests.cs
index 49977e6c80e9..e1f014079c80 100644
--- a/src/Security/Authentication/test/OpenIdConnect/OpenIdConnectTests.cs
+++ b/src/Security/Authentication/test/OpenIdConnect/OpenIdConnectTests.cs
@@ -25,6 +25,13 @@ public class OpenIdConnectTests
     static readonly string nonceDelimiter = ".";
     const string DefaultHost = @"https://example.com";
 
+    [Fact]
+    public void EventsPropertyIsInitializedOnConstruction()
+    {
+        var options = new OpenIdConnectOptions();
+        Assert.NotNull(options.Events);
+    }
+
     /// <summary>
     /// Tests RedirectForSignOutContext replaces the OpenIdConnectMesssage correctly.
     /// </summary>
diff --git a/src/Security/Authentication/test/TwitterTests.cs b/src/Security/Authentication/test/TwitterTests.cs
index d70230e53c4e..3e6e6174d8fd 100644
--- a/src/Security/Authentication/test/TwitterTests.cs
+++ b/src/Security/Authentication/test/TwitterTests.cs
@@ -41,6 +41,13 @@ protected override void ConfigureDefaults(TwitterOptions o)
         o.SignInScheme = "auth1";
     }
 
+    [Fact]
+    public void EventsPropertyIsInitializedOnConstruction()
+    {
+        var options = new TwitterOptions();
+        Assert.NotNull(options.Events);
+    }
+
     [Fact]
     public async Task ChallengeWillTriggerApplyRedirectEvent()
     {
diff --git a/src/Security/Authentication/test/WsFederation/WsFederationTest.cs b/src/Security/Authentication/test/WsFederation/WsFederationTest.cs
index 6ea9ebdb733e..b4b561b7718d 100644
--- a/src/Security/Authentication/test/WsFederation/WsFederationTest.cs
+++ b/src/Security/Authentication/test/WsFederation/WsFederationTest.cs
@@ -23,6 +23,13 @@ namespace Microsoft.AspNetCore.Authentication.WsFederation;
 
 public class WsFederationTest
 {
+    [Fact]
+    public void EventsPropertyIsInitializedOnConstruction()
+    {
+        var options = new WsFederationOptions();
+        Assert.NotNull(options.Events);
+    }
+
     [Fact]
     public async Task VerifySchemeDefaults()
     {