As I mentioned in my post on how do to do an STS based on Windows Authentication and AzMan Roles, there was an Indigo behavior that Steve and I developed to make things easier. Check out his post for full details. Also see our team-member Aaron's post on Declarative Security with AzMan and CAB for...