diff --git a/web/backend/Features/Features.Auth/DependencyInjection/FeaturesAuthServiceCollectionExtensions.cs b/web/backend/Features/Features.Auth/DependencyInjection/FeaturesAuthServiceCollectionExtensions.cs
index d4a27b7d..35681939 100644
--- a/web/backend/Features/Features.Auth/DependencyInjection/FeaturesAuthServiceCollectionExtensions.cs
+++ b/web/backend/Features/Features.Auth/DependencyInjection/FeaturesAuthServiceCollectionExtensions.cs
@@ -1,6 +1,8 @@
+using Features.Auth.Identity;
 using Features.Auth.Repository;
 using Features.Auth.Services;
 using Infrastructure.PasswordHashing;
+using Microsoft.AspNetCore.Identity;
 using Microsoft.Extensions.DependencyInjection;
 
 namespace Features.Auth.DependencyInjection;
@@ -9,14 +11,43 @@ namespace Features.Auth.DependencyInjection;
 public static class FeaturesAuthServiceCollectionExtensions
 {
     /// <summary>
-    ///     Adds <see cref="IAuthRepository" />, <see cref="ITokenService" />, and the Argon2 password hashing
-    ///     infrastructure as scoped services.
+    ///     Adds <see cref="IAuthRepository" />, <see cref="ITokenService" />, the Argon2 password hashing
+    ///     infrastructure, and ASP.NET Core Identity (<see cref="UserManager{TUser}" /> backed by
+    ///     <see cref="DapperUserStore" />) as scoped services.
     /// </summary>
     public static IServiceCollection AddFeaturesAuth(this IServiceCollection services)
     {
         services.AddScoped<IAuthRepository, AuthRepository>();
         services.AddScoped<ITokenService, TokenService>();
         services.AddScoped<IPasswordInfrastructure, Argon2Infrastructure>();
+
+        services
+            .AddIdentityCore<ApplicationUser>(options =>
+            {
+                options.User.RequireUniqueEmail = true;
+
+                // Password/username complexity is already enforced by RegisterUserValidator
+                // (FluentValidation); disable Identity's own checks to avoid duplicated/drifting rules.
+                options.Password.RequireDigit = false;
+                options.Password.RequireLowercase = false;
+                options.Password.RequireUppercase = false;
+                options.Password.RequireNonAlphanumeric = false;
+                options.Password.RequiredLength = 1;
+            })
+            .AddDefaultTokenProviders();
+
+        services.AddScoped<DapperUserStore>();
+        services.AddScoped<IUserStore<ApplicationUser>>(sp =>
+            sp.GetRequiredService<DapperUserStore>()
+        );
+        services.AddScoped<IUserEmailStore<ApplicationUser>>(sp =>
+            sp.GetRequiredService<DapperUserStore>()
+        );
+        services.AddScoped<IUserPasswordStore<ApplicationUser>>(sp =>
+            sp.GetRequiredService<DapperUserStore>()
+        );
+        services.AddScoped<IPasswordHasher<ApplicationUser>, Argon2PasswordHasher>();
+
         return services;
     }
 }