Auth Source must be the only place where authentication and credential check is done.
Connector Service
Bazaar Service