Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>If you are hosting your WCF service in IIS, it will run in the ASP.NET worker process, which means you can configure authentication and authorization as you would do with ASMX web services:</p> <pre><code>&lt;system.Web&gt; &lt;authentication mode="Windows"/&gt; &lt;authorization&gt; &lt;allow roles=".\Administrators"/&gt; &lt;deny users="*"/&gt; &lt;/authorization&gt; &lt;/system.Web&gt; </code></pre> <p>Then you will have to disable anonymous access to your endpoint in IIS, and instead enable <strong>Windows Integrated Authentication</strong>.<br/>In the IIS management console you do that by bringing up the '<em>Properties</em>' dialog for your virtual directory. You will then find the security settings in the '<em>Directory Security</em>' tab.</p> <p>Of course, the only communication channel available will be HTTP. Clients will have to provide their Windows identity in the request at the <em>transport-level</em> with these settings:</p> <pre><code>&lt;system.serviceModel&gt; &lt;bindings&gt; &lt;wsHttpBinding&gt; &lt;binding name="WindowsSecurity"&gt; &lt;security mode="Transport"&gt; &lt;transport clientCredentialType="Windows" /&gt; &lt;/security&gt; &lt;/binding&gt; &lt;/wsHttpBinding&gt; &lt;/bindings&gt; &lt;client&gt; &lt;endpoint address="https://localhost/myservice" binding="wsHttpBinding" bindingConfiguration="WindowsSecurity" contract="IMyService" /&gt; &lt;/client&gt; &lt;/system.serviceModel&gt; </code></pre> <p>Note that if your service endpoint uses <strong>wsHttpBinding</strong> then you will also have to add SSL to your endpoint since that's a requirement enforced by WCF when you using transport-level security.<br/> If you instead go for the <strong>basicHttpBinding</strong>, you are then able to use a <em>less secure</em> authentication mode available in WCF called <strong>TransportCredentialOnly</strong>, where SSL is no longer required.</p> <p>For more detailed information, <a href="http://www.code-magazine.com/articleprint.aspx?quickid=0611051" rel="noreferrer">here</a> is a good overview of the security infrastructure in WCF.</p>
    singulars
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. This table or related slice is empty.
    2. VO
      singulars
      1. This table or related slice is empty.
    3. VO
      singulars
      1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload