UI Authentication
End-user authentication for the Next.js app (apps/ui). Dual-layer: Better Auth owns the session cookie; Strapi Users-Permissions issues a JWT used for per-user API calls.
OAuth Providers
End-user social login via Strapi's Users & Permissions plugin. End-users only — these providers authenticate visitors of your app. For CMS-admin SSO see Microsoft SSO.