What we do is we have two Active directory domains - one for internal
users and one for external users. When we want to give extranet access
to our clients, we add a new user to the Active Directory domain. In AD,
you can specify their email address, and then you can add the users
using the format domain\username.