Check out ScottGu's Latest Trick :
Integrating ASP.NET Security with Classic ASP and Non-ASP.NET URLs
Disclaimer The opinions expressed herein are my own personal opinions and do not represent my employer's view in anyway.