To clarify our understanding, we will walk through an empty project template and learn how security can be implemented in an ASP.NET Core web application step by step.

To start with, let's create an ASP.NET Core MVC web application project. With the empty project, there is no option to select the authentication type. We will start by configuring the Entity Framework to configure data persistence, then configure ASP.NET Core Identity, and finally create controllers to perform user registration, log in, and log out.