Yes there is auth on by default for resources. You can use real accounts that need to be created or passwords or pins. And I think some id providers.