Authentication and Authorization

Aug 18, 2015 at 4:54 PM
first of all sorry for my English. Probably text may contain different errors. ok, let's play :)

What I have
I have a parent site where users login automatically. UserId is taken from Account Directory (AD), next step, the user is searched in the database and applied to IIdentity. Roles and Accesses are also in the database.

My question is:
What's my best way in this case?
I would not like to add users every time myself.
I can't allow users to register themselves.

Account Directory contains UserId, First and Last name. I could check it in database and if it doesn't exist then I can add user and add roles and rights. What do you think?