Federated provisioning with Windows Identity Framework (WIF)

I have with usage of Windows Identity Framework (WIF) created IP-STS and three separate Relying Parties under the one federation. Federated Single Sing On and Sign Out scenarios work fine. This is prepared as an demo.

What is my problem ?

In production I have to unify 3 different web applications under the on identity roof. Currently all of these applications have different authentication and authorization mechanisms, in data store different set of tables are assigned for specific users etc. For sign on and sign out everything is clear to me. Problem is with creation of new users. Is there any general pattern in these scenarios. Why I am asking this. When you go deeper in this case you can find that is not so simple. For first web app we have a set of fields that have been supported (most of these are some enumerations from DB), from second set of others.

I have found that this is part of the provisioning management or federated provisioning. Also I have found that it could be realized by SPML protocol that is going hand by hand with SAML protocol. Is there any protocol or point of integration in WIF for these purposes ?

I saw that there is support for provisioning scenarios in ACS. Is there some libraries or samples to do that on the self-developed IdP and on RPs sides.

Regards, Rastko