The Framework stores its own user profiles and passwords1 in tables VFPPF06 and VFPPF07.
The server also has its own native method of storing user profiles and passwords.
When a VLF-WIN user connects to a server they use the server's native user profile and password. But once they are connected, the Framework controls which Framework objects they can access using its Framework authorities, if the user profile exists in the Framework security tables.
In VLF-ONE your customized version of program UF_OLOGON is responsible for the user and password validation. Refer to the shipped source code for more details of how to customize UF_OLOGON.
Note 1: The storage of passwords is by the VLF provided for backward compatibility purposes only. You should not use this feature in new applications.