Canvas apps can authenticate a user with:
OAuth
Signed request
Usemane and password
Either OAuth or signed request
Submit