Don't use third party auth to sign in
I see many people in this thread dread existing auth scene and ask for a better solution. 
Client certificates, but usable and no hardware - <a href="https://github.com/sakurity/securelogin" rel="nofollow">https://github.com/sakurity/securelogin</a> 
this is the only sovereign answer to auth battles.