Winlogon is the Windows module that performs interactive logon for a logon session. Winlogon behavior can be customized by implementing and registering a Credential Provider. The logon screen is the first thing users see when they turn on the computer and is driven by credential providers. A program can customize the logon experience and integrate the authentication methods by registering a Credential Provider. The Credential Provider Filter is used to dynamically filter credential providers based on information at runtime.