Creating a login check that allows two ways of web application access

Question

I have an older web application that we are still using.

Some users are starting to use a newer .Net Core Entity Framework app that uses its API to connect to the bac