Our contractors in India are reporting on tasks from an untrusted domain
We created domain users in the home domain for each user resource then the contractor site has
a router to router vpn connection which has limited access to a small sub net on the home domain that includes
one of the Project Server ip addresses. (multihomed server)
Upon first login to PWA, since Project Server uses Windows Integrated authentication,
those users are asked for a Windows Login. They enter the home domain login information,
which is utilized almost exclusively for PWA since the rest of our intranet is forms based authentication
(ebay style). The Windows Integrated credentials are saved (remember) in IE.
It seems to work.
The VPN could be established on a per PC basis as well, just like working from home but it is more seamless
for the contractor site to just have the router do it, and the India network has appropriate DNS entries to find
the few root Intranet names.
If the contractors needed to manage Projects, Terminal Server or it's "one at a time" cousin,
remote desktop sharing are both workable.
