HI,
Having Https is enough securing the data transmitted over internet and form based authentication is not required. If you have to only access the few CRM services subset i.e. few methods like Create Account, Retrieve Account etc then i would suggest
you to create a WCF webservice that will interact with CRM webservice instead of exposing the CRM services (all CRM) to internet.
*If you users are only accessing CRM from company network then you should not have to expose CRM system to internet.
Jehanzeb Javeed
http://worldofdynamics.blogspot.com
Linked-In Profile |CodePlex
Profile
If you find this post helpful then please "Vote as Helpful" and "Mark As Answer".