What does this mean in ASP form based security context ?

I have acquired an application and it has stanadard ASP form based security. In technical document it contains these. I don;t know the meaning of these 4 especially last 2. Anyone could help to tell more since I am quite new to form based security on ASP. Thanks
 
 
Password strength requirements are not enforced in the CreateUser and ChangePassword methods. The settings are read from configuration, but at are not used by the provider. Account lockouts are not implemented in the provider. The UnlockUser method has no effect, and the provider does not count bad password or bad password answer attempts.
The provider does not support creating a new user with an explicit UserId (i.e. providerUserKey).
The provider does not support retrieving a user based on UserId (i.e. providerUserKey).
...