How Does ASP.NET associate a request with a session?

Question

Is there a cookie automatically placed on the user's machine? Or is it somehow associated with the requester's IP address? Or maybe in the ViewState? Elementary question, I know, but I've had a hard time finding an answer.

Answer 1

In IIS, under ASP.NET's configuration there is a State Management Tab which has a setting called "Cookieless mode" which has the options of:

UseUri

UseCookies

AutoDetect

UseDeviceProfile

Typically, "Use Cookies" is selected and thus a cookie is used.