Building Secure ASP.NET Applications: Authentication, Authorization, and Secure Communication

msdn.microsoft.com/en-us/library/aa302388.aspx