Hello Aakash,
You've set the Authentication to Custom. The configured microflow is supposed to return the User that's actually trying to authenticate.
If you want to apply “Custom Validation” on API calls for example to check if attributes meet certain criteria, that's not done in the Custom authentication but in the operation microflow itself.