An System.Security.Principal.IPrincipal object represents the security context of the user on whose behalf the code is running, including that user's identity and any roles to which they belong.

This property uses the System.Web.HttpContext object's System.Web.HttpContext.User property to determine where the request originates.