title: ASP.Net - Using Basic Authentication without having Windows Users
body: <p>We have an ASP.Net web application running on IIS6 that manages its own database of users.</p>
  
  <p>The site itself just allows anonymous access and all authentication/security is managed using our application itself.</p>
  
  <p>We have a page that contains an HTML table of data that we import into Excel and is then used for Reporting purposes. The page currently has no security implemented.</p>
  
  <p>We need to add security to this page so that should these spreadsheets fall into the wrong hands then the data cannot be "Refreshed" without supplying a username / password.</p>
  
  <p>If I set this page to not allow Anonymouse access then I can use Basic/Windows authentication with Windows Users in order to secure this page. Then when Excel refreshes the data the password dialog box pops up.</p>
  
  <p>The problem is that I need to be able to secure this page based on the Users within our database and they will not be Windows users. I also need to do it in such a way that allows Excel to manage the authentication which excludes any Form based authentication.</p>
  
  <p>Anyone got any ideas? Is it possible to get IIS to look elsewhere for it's Basic Authentication?</p>