I'm new to using MVC and Web API, and I need to create an API with the individual user accounts security so that external users can register and login.
But then I want internal administrators within the company to be able to manage the API user accounts. These admins are already logged on to their local machines with windows AD accounts, and I don't want them to have to log on again to the API.
So far the only way I've found to do this is to have the API, and then a separate MVC site for the internal admins that use windows account logins.
It seems a bit messy / awkward though, is there a better way of doing this? Am I looking at it completely the wrong way?