Database. If not specified,
Streamwill be used. Authentication User Storage has more information about this.
Each user file entry must be within a session section. If more than one user file is specified in the same session section, the last entry will be used for that session.
When processing requires, only one user file will be used. The one used will be the one that is nearest (and farthest from the root) to the session for which access is being evaluated.