See SharePoint 2010: Claims-Based Authentication.