...
CORE uses federated login to authenticate users. After a user is successfully authenticated CORE checks the local user database to see if the user exists. It then loads all the user data , like user role, user presentations etc. (user role, presentations by this user, submissions by this user etc.) and persists the user in a session. See diagram for a complete overview.
...