How can I use a service in our DMZ, to authenticate and authorize against an internal SQL Server database?

[Rod at Work]

We are in need of putting some services onto a server in our DMZ. Other business partners will authenticate against it and thereby gain access to SQL Server databases behind our firewall. I have experience writing WCF and WebAPI services, but all within a corporate firewall. Now we need to allow some people at partner businesses to run apps we'll write (both Web and Windows apps that will be installed on those users' machines) from outside of AD network. I'm guessing that we'll have an AD in the DMZ, separate from our corporate AD, which will be reached via the service on the server in the DMZ. But how do we do that? And what examples in C# are there for accessing the SQL databases from those services on the server in the DMZ?
Rod

Continue reading...