IWA for node application

I have an application (hosted on an on-premise server) and users in the active directory should be able to access the application seamlessly. ie Once a user logs in with their windows authentication they should be able to seamlessly access my application. Something like this https://community.esri.com/t5/arcgis-enterprise-questions/using-python-with-integrated-windows/td-p/25895 [ Our ArcGIS Server 10.31 uses Integrated Windows Authentication (IWA). I am able to access everything using a web browser without ever logging in. It's really seamless. ]

How should I go on about , is IWA the correct approach ? How can I control access in the application based on different users, should I integrate windows users also to my user database (backend) ? Any pointers.