details here: http://www.cloudidentity.com/blog/2013/04/08/walkthrough-1-adding-sign-on-to-your-web-application-using-windows-azure-ad/