Are you using the RoleManager feature in your app? I can't quite tell how you're already doing the caching... worst case scenario you just write the code to cache the role info in ASP.NET data cache and populate those roles into the HttpContext.User in Application_PostAuthenticateRequest (which is same pipeline event he RoleManager is handling).