Yeah we store our user credentials on our side and manage them. Along with refreshing tokens and so forth