In this aricticle, I explained how you can authenticate users without knowing their identity or getting their personal data.