In my application I have both local and AD users. I need to associate users to other tables, so my first idea was to check on AD whether the user credentials are valid and, if they are, force local authentication. In case the user is not AD, then authenticate him locally.

Is this correct, or should I consider a more sophisticated approach like integrating my app with AD or something like that? I know that I can integrate my application with Active Directory, but all I need at the moment is user data and his groups.

Thanks!