If you followed the embedded App pattern, anyone trying to access your App from outside the Shopify Admin would be prompted to first identify themselves and to login (authenticate). Once authenticated successfully, they'd be in the Shopify Admin.
Are you having trouble with the embedded App pattern?