Microsoft Windows Communication Foundation 4.0 Cookbook for Developing SOA Applications

Chapter 7. Security

In this chapter, we will cover:

• Setting up ad hoc Windows authentication over plain HTTP
• Getting an authenticated client identity in a service operation
• Using username authentication with an ASP.NET membership provider
• Sending a clear text username token over unsecured HTTP transport
• Using transport and message security at the same time
• Authorizing through declarative role-based access control
• Impersonating with a client caller identity
• Adding multiple tokens in a service request (supportingToken)
• Supplying dedicated credentials for firewall or proxy authentication
• Securing a dynamic SoapHeader

Introduction

Security is a big topic in distributed communication applications. When the client consumers call a service operation through an ...