You are right about the web.config. Its however so tightly integrated with asp.net that its hard to make a distinction. I don't like the method of htacces (towards password protection) so that's why I asked it. Seems like security assist gives a full system and it looks very beautifull alternative.
I have one more question. I see that the wizard has a dialog for setting up the login page etc. etc. Can you integrate these pages as plugins with framework builder, is it easy to alter the code?
Thanks in advance..