Here’s an opinion that may ruffle some feathers.
After two and a half years working with auth0, plus some time trying to implement AWS Cognito, I never want to use a third party authentication system again.
I get it, big businesses don’t want the data liability, but fucking hell… it causes more problems than it solves and makes a lot of basic auth handling three times more difficult.
Handling passwords is not so hard that you need to outsource it!