Computernerd22 : the question isn't whether or not it uses it, but at what point it kicks in (before or after credentials are submitted)

Would someone more knowledgable on the subject than Neg or I care to chime in on the exact process? I'm curious now....