Users, Applications and Roles in SSO

Hi.

I hope someone cold help me on this (it is a single sign on enviroment):

- If i have a user that have a access to a application how should i define the relation? Define a role and add a user AND the application to the same role?

- There are only "add, remove.. user to role" stored procedures created. What is about the application? Howe do we add the application to a role?

- Is the user entry in the users table (and thus in the membership table) only ment for the login application (and therefore ONLY for the authentication of the user)? For other application associated with the user the first question applies?

 I would very appreciate some clarifying on this because i am new to the forms authentication stuff.

Thanks in advance.

markov 
...