Not sure what you mean by "user trickery."
Each version of SSRS to date has used Windows authentication as a standard (and virtually the only "out of the box") authentication scheme. If you want to perform authentication using forms, you always had to write your own custom authentication module.
I did both in production environments depending on the situation, and their sample is a very good place to create my own custom auth module.
pfunk source
share