The **forms authentication model** in Optimizely Content Management System (CMS) uses the default membership and role system in ASP.NET. Configuration of membership and role providers is done in _web.config_ file for the website. The CMS sample sites have a number of predefined users, groups and roles, both for managing editorial content as well as for administering the e-commerce tasks.

To configure forms authentication, set the authentication type in the **system.web** section of the _web.config_.