name: the name used for the cookie loginUrl: page location to which the HTTP request is redirected for login protection: protection applied to the cookie. The possible settings include All, None, Encryption, and Validation. timeout: amount of time (in minutes) after which the cookie expires. The default value is 30 minutes. path: Specifies the path for cookies issued by the application. requireSSL: whether you require that credentials be sent over an encrypted wire (SSL) instead of clear text. slidingExpiration: whether the timeout of the cookie is on a sliding scale. cookieless: how the cookies are handled by ASP.NET. The possible values include useDeviceProfile, useCookies, auto, and useUri. The default value is useDeviceProfile.