<configuration>
    <system.web>
        <authorization>
            <allow roles="DOMAIN#All Blub Users,DOMAINBlub Users" />
        </authorization>
...