user accounts should probably be federated. Or federated accounts should be easily identifiable versus non-federated. Federation is pretty easy if you tie it to google, Facebook, Microsoft saml/openid. I’m fine with those options but I understand how others may not.
This is how mandatory Digital ID will be enacted. For convenience.
Loved infinity when I used it. Good luck!