I work on an Internet-facing, ASP.NET-based product that uses SQL Server 2005. Most customers deploy our software using the traditional approach with the app server (IIS) located in a DMZ, and SQL Server behind a secondary firewall.

We would like to pick one type of SQL Server authentication. From a security perspective and/or a customer perspective, what is Integrated or SQL Server authentication preferred?

I've read the related posts, and if it matters, our app uses SQL directly, as well as stored procedures. Our application implements a security model, so we don't need to be able to distinguish between users within SQL Server.

Thanks,
Scott