Authentication is always based on the user store. Usually this is an LDAP directory service, either Active Directory or OpenLDAP.
We use your existing user store as the leading user source. Thus you can hold to your existing workflows during user administration. Enrolling strong authentication does not require to change your existing work flows.