title: ASP.NET OWIN WebForms require authorization all pages
body: <p>I created a new ASP.NET WebForms application with Visual Studio 2013, Update 2. Then I updated all of the NuGet packages and removed all of the OAuth stuff since I just want "forms" authentication, which is what I'm familiar with.</p>
  
  <p>What I want is to configure the OWIN/ASP.NET Identity framework <strong>so that all pages require authorization</strong>, including default pages - so the first page a user should see is the Login page. What is the correct way to do this? I cannot find any resources on the Internet that show how to secure a WebForms page with OWIN/ASP.NET Identity.</p>
  
  <p>I added the following XML to the bottom of my main web.config file, I get an error:</p>
  
  <pre><code>&lt;authorization&gt;
    &lt;deny users="?"/&gt;
  &lt;/authorization&gt;
  </code></pre>
  
  <p>The error is: <strong>The requested page cannot be accessed because the related configuration data for the page is invalid.</strong></p>