We are developing a intranet webapp. Users have there roles stored in Active Directory. What is best practice? Use Windows of Forms authentication? ...