The logon process
The following diagram explains the logon process, which starts when a user logs in to the StoreFront server and concludes when the requested application is started. It illustrates a typical local login without including the use of a NetScaler Gateway.

The logon process
Enumeration
A user enters the username and password in the web login form of the StoreFront server (A). The authentication service running on StoreFront validates the credentials with a Domain Controller (DC) (B) and fetches all the user group memberships. StoreFront checks its local database (datastore) for existing user subscriptions, and it validates the user mapping configuration in a multisite configuration to determine the site that the user belongs to (as explained in Chapter 2, Monitor and Optimize Infrastructure – Director and EdgeSight®).
StoreFront forwards the credentials to one of the Delivery Controllers of that site (C).
Note
If the user is not a member of a configured group, StoreFront...