For example, if you’re executing a Web application, the CLR will interrogate the Web.config file to determine the authentication mode (Forms, Windows, or None), authorized users, session state ...