ASP.NET Identity Settings

http://msdn.microsoft.com/en-us/library/aa302377.aspx

This is the most concise summary of ASP.NET security configuration.

And, you need to be careful about the double-hop problem.