Macquarie Group Interview Question

How's the authentication flow of a web app?