Access control in WIF - nordvall/WifExamples GitHub Wiki
If you want to limit the access to certain parts of your solution, you can use claim authorization. Commonly Role claims are used, but any claim is technically possible.
Pages or sections of your web site
Use declarations in web.config. See the sample projects for examples.
Web service methods
Use [PrincipalPermission] attributes on the web service methods. See the sample projects for examples.