a web application design question

 

First, thank you for your help. I am new to architecture, and I would prefer to make the right design decision.

 

I have the following design requirements for a web application:



This site would serve both internal users under Active Directory and external users (partners) who are not under Active Directory

Users must be authenticated

Exchanged data is sensitive

There is a web services layer to connect the site to the different data stores

the services layer is behind the firewall

The data stores reside behind the firewall as well
My dilemma is as follows:


Should I create two sites: one for internal users and another one for external users

Use AD for ...