I have done this using the ReportViewer control by spinning up an alternate Windows Identity in the background that has access to the SSRS Web Services (report server directly) but never through a link in a rendered report. Basically I have a button on a Web Form that says "Get PDF". We render all the parameters on the page too, however, using the Web Services to get those so possibly a totally different implementation than you.