silverstripe-framework/_config/security.yml

---
Name: coreauthentication
---
SilverStripe\Core\Injector\Injector:
  SilverStripe\Security\MemberAuthenticator\SessionAuthenticationHandler:
    properties:
      SessionVariable: loggedInAs
  SilverStripe\Security\MemberAuthenticator\CookieAuthenticationHandler:
    properties:
      TokenCookieName: alc_enc
      DeviceCookieName: alc_device
      CascadeInTo: %$SilverStripe\Security\MemberAuthenticator\SessionAuthenticationHandler
  SilverStripe\Security\AuthenticationHandler:
    class: SilverStripe\Security\RequestAuthenticationHandler
    properties:
      Handlers:
        session: %$SilverStripe\Security\MemberAuthenticator\SessionAuthenticationHandler
        alc: %$SilverStripe\Security\MemberAuthenticator\CookieAuthenticationHandler
---
Name: coresecurity
After:
  - requestprocessors
---
SilverStripe\Core\Injector\Injector:
  SilverStripe\Control\Director:
    properties:
      Middlewares:
        AuthenticationMiddleware: %$SilverStripe\Security\AuthenticationMiddleware
  SilverStripe\Security\AuthenticationMiddleware:
    properties:
      AuthenticationHandler: %$SilverStripe\Security\AuthenticationHandler
  SilverStripe\Security\Security:
    properties:
      Authenticators:
        default: %$SilverStripe\Security\MemberAuthenticator\MemberAuthenticator
  SilverStripe\Security\CMSSecurity:
    properties:
      Authenticators:
        cms: %$SilverStripe\Security\MemberAuthenticator\CMSMemberAuthenticator
  SilverStripe\Security\IdentityStore: %$SilverStripe\Security\AuthenticationHandler