If you use discourse connect then it’s the sole authentication provider. You’ll need for your moderators to have accounts on the authentication server that the students use. Admins can use /u/admin-login but I don’t think that works for moderators.
If you use OAuth2 you can have multiple authentication providers.