leastprivilege.com
A Guide to Claims-Based Identity and Access Control
Get it here!!!