11-24-2019, 11:25 PM
Hello afkab, I'm afraid you misunderstood the authentication process a bit. It is not used to decide whether a player may or may not join a server; it is only used to verify that the connecting player has a proper licence bought from Mojang, rather than a pirated version. For your use-case, using the whitelist is the best way to go (assuming, of course, that your son and his friends have a genuine copy of Minecraft).