http://blogs.technet.com/btrst4/archive/2005/07/19/407915.aspxSeriously, this stuff is really hard. I work in the Identity Management space and most of my time has focused more on enterprise Idm solutions (things like metadirectories and provisioning). Recently, I have been studying this from a more wholistic interneten-USCommunityServer 2.1 SP1 (Build: 61025.2)