I'm trying to protect my QA site from anonymous users coming to it. I tried using basic authentication, which works for the front-end, but because it changes the authentication type to "Windows" it knocks out the admin area (trying to log in just bounces you back to the login screen again).
My site has Sitecore authentication for a subset of data, so I can't just slap a forms authentication on the whole thing (besides it adding a layer of coding that's not needed in production). IIS also doesn't allow for both forms and basic authentication to function together...I tried it and it seemed to favor forms and ignore basic.
I want to make it so users have to enter a simple username/password to see anything of the site (front end or Sitecore shell area), but not knock out the front-end login functionality or the Sitecore login functionality.