Manual:$wgSessionProviders

Details
Specifies what providers to use for .

By default,  (for normal cookie-based authentication) and   (for man>Special:MyLanguage/Manual:Bot passwords|bot passwords) are included.

Order and array keys are not relevant.

By convention, the array key is the classname of the provider.