The more I work with software, the more I learn that I don't know much about best practices for user authentication. No wonder people prefer to use cloud authentication platforms. Also, it's always better for such systems have inputs and audits from many entities and personnel.