Revision history [back]

Yes, this statement is correct. When Windows authentication is not available, ASP.NET Core uses forms authentication, which relies on a username and password to authenticate users. This allows users to be authenticated against a database or other identity provider.