Building Secure ASP.NET Applications: Authentication, Authorization, and Secure Communication

http://msdn.microsoft.com/security/default.aspx?pull=/library/en-us/dnnetsec/html/SecNetch08.asp