what is the best practice to authenticate only user in a app that belongs the company?
i considered that the user should authentication via his company account mail & password as ms office 365.
or maybe via active directory and web api?
any suggestions?