It is possible yet not recommended to work with a local user account. The security of such a setup is low and can be applied to very small environments only. OIDC approach is recommended.
Such an account is created in TaskControl instance by user. Passwords of the users are maintained as hashes.
User authenticates using form authentication and user email is used as Unique ID.