title: ASP.NET Identity + Windows Authentication for Intranet Site
body: <p>I am building an intranet site where users will be on the corporate domain and have different permission levels.  I'm currently using <code>&lt;authentication mode="Windows"/&gt;</code> to control site access, but it seems like I should be using <a href="http://www.asp.net/identity/overview/getting-started/introduction-to-aspnet-identity" rel="noreferrer">ASP.NET Identity</a>.</p>
  
  <p>For example, say my application is a dashboard for each department in the organization.  I want to create a single AD group called <code>DashboardUsers</code> and put everyone that can touch the site in this group.</p>
  
  <p>I also want to restrict the views in the dashboard.  For example, I only want the IT group to see their view, and the Finance folks see theirs, etc.</p>
  
  <p><strong><em>Question</em></strong> -- should I be using Windows Authentication to control access to the site, and then use ASP.NET Identity for user level permissions?</p>