Could I create or authenticate the user instead of Shopify

[disputify]

You can’t persist passwords against a customer, or authenticate against a customer in any way.

However, if you’re authenticating customers within your own app/site, you could then associate an order via the API to that Shopify customer