Manual:$wgSessionProviders

Details
Specifies what providers to use for SessionManager. By default,  (for normal cookie-based authentication) and   (for bot passwords) are included.

Order and array keys are not relevant. By convention, the array key is the classname of the provider.