A standard way to let people log in with an account they already have (Google, GitHub) instead of making a new password. The other service vouches for them, so you never handle their password.