In the beginning, basic authentication is fine. If possible, we can also reuse some OAuth provider (e.g., CILogon): https://django-allauth.readthedocs.io/en/latest/providers.html#cilogon