ASPNET Authentication/IIS Authentication

See more:

ASP.NET

IIS

Hi,
I am quite confused with IIS Authentication and ASPNET Authentication.

It makes sense and i do understand that a website builded for internet users can have Anonymous Access cheked in IIS security and to have Authentication mode set to "Forms" in web.config.

It also makes sense to have IIS Authentication set to "Integrated windows authentication" and Authentication mode set to "windows" in web.config for Intranet users.

Above points makes sense to me because as per my understanding..when user makes an http request, first IIS authenticate the user and than request is handed over to ASPNET Engine for its own authentication and authorization. I believe that this second authentication is what being controlled by Authentication mode attribute in web.config..m I right?

Please correct me if i am wrong in my above understanding.

Also, does it makes any sense to have IIS authentication set to Anonymous and Authentication mode set to "windows" in web.config???

Thanks!!
Rahul