Hi!

You can try to retrieve this role information from the
LoadSecurityTokenAssertion method in your customized UsernameTokenManager.

public class MyUsernameTokenManager: UsernameTokenManager {
 public override ISecurityTokenAssertion
LoadSecurityTokenAssertion(XmlElement element)

 {

   /*  parse the element to get the role element

       this element should look like

       <SecurityToken xmlns="http://schemas.xmlsoap.org/ws/2002/12/secext">

<wssp:TokenType>http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-user
name-token-profile-1.0#UsernameToken</wssp:TokenType>
           <wssp:Claims>
               <wssp:UsePassword wsp:Usage="wsp:Rejected" />

               <wse:Role>Administrator</wse:Role>
           </wssp:Claims>
         </SecurityToken>

   */

   // Do not foget to invoke the base class

   return base.LoadSecurityTokenManager(element);

 }

}

Hope this helps.

hongmei