Is it a valid configuration to have a forms portal server in the DMZ that only hosts our "public"  forms so we would not have to configure STS to LFDS since we won't need to authenticate any users? 

We would have our internal users use our forms server that is inside our LAN.