Before ASP.Net membership providers, Commerce Server used ISAPI based authentication in conjunction with CommerceAuthentication HTTP module for authentication. This, of course, was rendered obsolete with the introduction of Membership providers and subsequently the UPMProvider. But, nonetheless, this little cryptic file (CSApp.ini) was left each and every time you un=package a Commerce Solution. If you dare delete it, you get a nasty error at your application start-up.

So, what’s the deal? Well, it stands in the fact, that the standard web.config file for Commerce Server 2009 still includes the HTTP Module. So, in order to get rid of the CSApp.ini file, you need to remove the CommerceAuthenticationModule from the HttpModules section in your web.config.

And there you go. Your application is not bound to your CSApp.ini file!

Tags: commerce server 2009