title: What alternatives are there for asp.net forms authentication?
body: <p>We are developing a web app that will have a pretty complex user and permission system.</p>
  
  <p>The general idea is that we have 3 levels of security: </p>
  
  <ul>
  <li>a simple user - that can only access basic data that is in a data repository</li>
  <li>a manager - that can open up data repositories</li>
  <li>a superuser - that can open up repository factories.</li>
  </ul>
  
  <p>each repository contains various data types(text, images, etc etc).</p>
  
  <p>We are looking for authentication methods that will allow us:
  1. Scalability.
  2. Customization.
  3. To create permissions that will effect the GUI + deny access to certain pages.
  4. To create predefined roles - that will allow for easy setup of new users.
  5. To create custom roles for specific users - allowing them permission sets that are different from the predefined roles.</p>
  
  <p>Thanks in advance</p>