APEX authentication schemes I actually use in production

Every APEX project starts with the same question: how do people log in?

Default: SAML / OIDC via the customer's IdP If the client has Entra ID, Okta or Keycloak, use it. Zero password management for you and offboarding is automatic.

Second choice: Database Accounts For internal tooling where users already have DB credentials, Database Accounts save an entire user-management layer.

Custom is the last resort Rolling your own authentication in PL/SQL is fun exactly once. After that it is a maintenance tax you pay forever.