This setting overrides $wgAuthManagerAutoConfig . It should only be used for site configuration, extensions should use that setting instead. It is intended to allow secure override of the default authentication configuration without having to worry extensions resetting it when they manipulate the setting in some hook. Most sites will not need to use this. The defaults are usually fine.