I am designing a typical N tier system, that will be used from windows desktop clients and web browsers.

So basically, I was thinking of building a central WCF that abstracts user authentication, user authorization, data access and business logic.

But the thing is I will be building an ASP.NET website too.
So I was thinking of doing the following :
ASP.NET Website ----> WCF ----> (business access,...