MS SQL Row-Level-Security out of a Citirx Store Front
The only way you have here is to use INTEGRATED SECURITY in the connection string.
In this way the connecting login is also used against the database but if there is a firewall between database and frontend that recognize windows authentication (it filters in application layer i suppose) every users need to be included in the allow rule. Usually, it is easily done using domain groups.