Building an application that requires user authentication? We all used to build this directly in our api / web application, but with all the security requirements and continuing hacking attempts, I would recommend against doing this part yourself. You cannot possibly spent as much money on security as the big companies do. So why not leverage their knowledge and experience? Azure AD B2C vs Entra External ID Microsoft is one of those companies that can help you with user authentication for you...