I know the Membership provider stores the user name and an expiration time in an encrypted cookie and then uses that to verify the user is still logged in for a session.
Not recommended but you can use FormsAuthenticationTicket.UserData.