You can use the plugin as it comes if you're happy with it or, more common, extend your app specific user implementation from the plugin.
The plugin itself is already capable of:
- User registration
- Account verification by a token sent via email
- User login (email / password)
- Social login (Twitter, Facebook, Google, Instagram)
- Password reset based on requesting a token by email and entering a new password
- User management (add / edit / delete)
- Simple roles management
- Simple Rbac and SuperUser Authorize
- RememberMe using cookie feature
- reCaptcha for user registration and login
- Two Factor authentication