I have a few websites for work that live outside of the corporate LAN -- and, therefore, out of direct-communication range of Active Directory (A/D) -- but for which I would
You may be able to simplify this by giving a different login portal to contractors/affiliates.