The user does not need to create an email and password combination in Canny as long as you are using Canny Identify to identify them. Canny Identify is an SDK that allows you to pass over the user data to Canny directly to make the experience seamless.
We do need to know who the user is, and Canny does create a "profile" for that user, but Canny Identify makes it so that it all takes place on the back-end. You can also set up an SSO redirect in case they land on your board unidentified.
If you're embedding Canny as a widget (mobile or otherwise), then that also uses SSO to create a seamless experience.
As a last resort, if nothing else is set up and the user goes to your Canny page, Canny will ask them to log in with their Facebook, Google, or GitHub accounts, or set up an email/password combination to create a Canny profile for themselves.