yes, actually the user can sign in with username/email + password (custom from app), but can link third party to their accounts (using supertokens)