title: In iis, what does having multiple authentication types on the same app enabled imply?
body: <p>I've gone too long just telling myself, well this just works so I'll treat it as a black box.</p>
  
  <p>I can enable anonymous, forms, windows security, etc... But if I enable multiple of them on the same path/app, what does that mean? Do they all run? Does the most secure take the role of verification?</p>
  
  <p>Is there a point to enabling anonymous and windows authentication?</p>
  
  <p>Is there a way to step through the authentication process?</p>