I use auth0.

For starters I would have no idea where to begin without the SaaS.

Next, it handles account management, signup, password resets etc. You'd have to write that yourself.