HI BasharA,

If your user already start an process instance, he needs to be connected with the same account to track the status of the process (and he needs to have at least "view participate" right for the process).

If you used a generic account to start the process, it will be more complex.

The right way to perform this, is to use another security provider than the Active DIrectory one. You can for example declare your user into the SQL K2 Security Provider (into the SQLUM database). Then your user can be authenticated through this security provider using a Form authentication.

 HTH