---
title: Configure forms authentication
slug: cms-11/dev-docs/forms-authentication
docTags: 
createdAt: 2026-07-22T19:45:17.341Z
---

The **forms authentication model** in Optimizely Content Management System (CMS) uses ASP.NET's default membership and role system in ASP.NET. Configure membership and role providers in `web.config` file for the website. The CMS sample sites have several predefined users, groups, and roles for managing editorial content and administering ecommerce tasks.

To configure forms authentication, set the authentication type in the `<system.web>` section of the `web.config`.

```xml
<authentication mode="Forms">
  <forms name=".EPiServerLogin" 
         loginUrl="Util/login.aspx" 
         timeout="4320" 
         defaultUrl="~/" />
</authentication>
```