Comment by aaronpk

Check out the actual spec, there's nothing in IndieAuth that relies on third parties. The whole point is so you can authenticate as your own domain to other things. There are some helper services that let you authenticate via Twitter/GitHub in case your website doesn't support IndieAuth natively. https://indieauth.net