I'm developing a site that will display confidential readonly information, with data fetched from a WCF service.

My question: What is the best approach to user management across different information pages.

The service returns a collection with customer info after a secure login. My idea is to have a Customer object class that is stored in session.

Is it possible to use things like HttpContext.Current.User.Identity.IsAuthenticated followed by HttpContext.Current.Session["UserId"] without using a database with role-based security?

Would I be better off with a combination of local database, Linq to SQL or datasets rather than using just class objects for data fetched from service?

thanks, nakori