Peter,
I thought that one of the enhancements in the 3.0 version of the viewer was a log in screen for secure services. If you make one of your base maps secure you should be prompted to login to use the viewer.
The user accounts on your arcgis server can be set from your active directory,
Regards
Anthony