What would be the best way to store additional information outside of active directory? I will be utilizing AD authentication as well as WIndowsTokenRoleProvider but I will also need to store some additional information about a user that will be used for authorizations purposes.
This is a ASP.net application with a SQL backend, I am looking for suggestions or perhaps some articles that can provide direction.