title: Asp.Net Users, Roles and OAuth2
body: <p>I'm working on a WebAPI which will have users with different profiles.</p>
  
  <p>There's some stuff relevant to the WebAPI in relation to users which should be stored there not including login or other identifying information.</p>
  
  <p>In addition to being able to sign up to the WebAPI users database users can alternatively use an OAuth2 provider to be identified and be entered into the database.</p>
  
  <p>So my question is, should the users information be stored in the WebAPI? how should I distinguish between users who directly signed up through the webapi or used a seperate OAuth2 provider (such as Facebook)? </p>
  
  <p>I was thinking of making a separate authentication server the WebAPI will use for users who register directly then we can use OAuth2 the same way for both userse who signed up directly to use the WebAPI and those who used a different OAuth2 service.</p>
  
  <p>Does that make sense?</p>