Christian and I have written an article about the authorization infrastructure in WCF. It covers roles- and claims-based authorization and how to customize both. Enjoy.
http://msdn.microsoft.com/en-us/magazine/cc948343.aspx(back online now - sorry for the confusion)
