Merge replication - Publisher/Distributor and IIS on separate workgroups

As per the document in 'Configure IIS 7 for Web Synchronization' (http://technet.microsoft.com/en-us/library/ff714039(v=sql.110).aspx),

The account used for the SQL Server Replication Listener must be a member of the PAL and be mapped to a login in the Publisher/Distributor database.

Is this possible to do this if the Publisher/Distributor server and IIS server are on separate servers and separate workgroups. If not are there any workarounds? or should these server belong to the same domain?

Thanks,