This is a newbie question so please be assume my knowledge is very basic. I have a SQL database that is the backend to a web application running on SQL2008 Web edition. I want to allow access to some of the data to an external application without allowing direct connections to the database so the data should be available over the web. It does not need to be human readable just picked up from another web application so XML would possibly be a suitable format. I have been researching that a web service using SOAP may be suitable but I have then found a TechNet article referring to Authentication over SOAP being deprecated.
What is the best way to allow external authenticated access to SQL data over the web?