title: ASP.NET MVC and WCF authentication/authorization against Active Directory with profiles in SQL server
body: <p>I have an intranet application, which can also be accessed from internet by clients. What I need to do is provide users that access it from the internet a login form to enter credentials and validate them against AD. Users that access this app from intranet should be logged in automatically.</p>
  
  <p>As I know I can't mix two authentication types in ASP.NET projects. So I need to use FormsAuthentication with ActiveDirectoryMembershipProvider to authenticate users. But what about profiles? I need to select profiles based on user's group (i.e. if it's a manager load profile from managers table, if it's a customer - from customer table).</p>
  
  <p>The second problem is that I need to use authenticated persons credentials to access WCF services. And determine what they can/can't do based on their group membership.</p>
  
  <p>Is using FormsAuthentication correct way to do this or I need to look somewhere else?</p>
  
  <p>I use EF code-first approach to create database. Services are implemented as WCF services. The app itself is an ASP.NET MVC site. But in far far future I will need WP7 client.</p>