What's wrong with using Forms Authentication?
You can set the the impersonate
attribute in the identity
element in your web.config to true if you need impersonation as well, but from what you've mentioned, it doesn't sound like you need impersonation at all.