Good link describing how asp.net mvc request/response pipeline works. If you are planning to make a custom security layer then this links may interest you. Asp.net Mvc 5 Life cycle: http://www.asp.net/mvc/overview/getting-started/lifecycle-of-an-aspnet-mvc-5-application Whtat is OWIN: http://www.asp.net/mvc/overview/getting-started/lifecycle-of-an-aspnet-mvc-5-application OWIN and Project