Ok, so in our current application we're using Active Directory (Windows authentication) for authentication, SQL Roles for our authorization, and also grabbing a user's email address from AD and saving ...