Questions tagged [wcf-security]

Questions related to the authentication and authorization services for Windows Communication Foundation (WCF) applications

Windows Communication Foundation is Microsoft's implementation of the WS-* web service specifications. Its security functionality mainly deals with authentication, authorization and secure over-the-wire transmission of user credentials.

When setting up WCF Security for an application, the following parameters need to be configured:

  • The type of credential required, e.g. NTLM, plaintext, or certificate authentication
  • The security mode: transport mode (e.g. SSL), message mode (SOAP message security), or a combination of both
  • Which endpoint(s) are protected

Once a client successfully connects to an endpoint protected with WCF Security, the server application can examine the security context to determine the identity of the client and to determine its authorizations (which need to be configured separately).

1285 questions
0
votes
1 answer

'System.ServiceModel.Security.MessageSecurityException' in WCF

I have WCF client with the following config.
Yuri
  • 2,820
  • 4
  • 28
  • 40
0
votes
1 answer

Terminate session - IInstanceContextInitializer close with custom statuscode?

I have a wcf application and i interest to close the instanceContext session with status of UnAutorized status, currently if i using Abort method - it return me InternalServerError. It's possible to close with custom statuscode?
David Michaeli
  • 367
  • 5
  • 26
0
votes
1 answer

404 Error Web Exception

the application is sending request to service but from httpGetresponse service url (https://prddb02:14448/service.svc) it returns 404 error. What can be the reason for the errors? When i run the https://prddb02:14448/service.svc(dev server) in web…
0
votes
1 answer

Generic code to dynamically add transport security to client endpoint binding in WCF

Is there any generic way to add transport security to client endpoint binding dynamically for WCF service? The binding can be accessed using proxyObject.Endpoint.Binding property. The Security property for each binding is specific to each…
Sambhaji
  • 990
  • 5
  • 19
  • 31
0
votes
1 answer

WCF Client Impersonation

Can someone point me to a [relatively] simple walk-through on how to properly configure an ASP.Net hosted WCF 4.0 service to impersonate the credentials of a caller for just certain methods of the service, but allow anonymous access to other…
camainc
  • 3,750
  • 7
  • 35
  • 46
0
votes
1 answer

Implementing Single Sign On for WCF service(Web Applications) Using OpenSSO

I am new to Single Sign On concept and I am trying to implement SSO for wcf service web applications using OpenSSO with SAML protocol. I couldn't get the clear idea from the internet sources that how i should proceed/start. Can u guys help me out.
0
votes
0 answers

WCF service in Windows service, NO IIS, anonymous authentication?

Does any of you perhaps know if it is possible to host a wcf-service in a windows service, without IIS installed, AND anonymous authentication? I keep getting a 403 (forbidden), because 'anonymous' is not allowed. Local in VS everythings works, but…
Roelant
  • 65
  • 2
  • 8
0
votes
1 answer

Impersonation using WCF

I am trying to expose via WCF Web services, functions that access SQL server (via Entity Framework) using the user's credentials (this is a client/dba requirement because of audit triggers etc. Gave up trying to convince them not to use user's…
Chaitanya
  • 5,203
  • 8
  • 36
  • 61
0
votes
0 answers

Custom WCF AlgorithmSuite in Config File

I have created a custom algorithm suite class following the instruction on https://msdn.microsoft.com/en-us/library/gg617968(v=vs.110).aspx. However, instead of specifying the class in code, I want to specify the custom class in the XML…
0
votes
1 answer

WCF Web Service and Data Service using SAML

I have WinForms and ASP.Net applications that need to access WCF Web and Data services using a SAML token. I've been looking at Windows Identity Foundation (WIF) to enable the WCF service to use SAML tokens from an STS-IP. On the client, do I make a…
Mike Therien
  • 928
  • 3
  • 10
  • 25
0
votes
1 answer

Can you define what certificate a WCF Service uses?

We have multiple programs hitting one WCF Service. When a client sends a message they get to define both a client certificate and a service certificate. To do signing and encryption. As far as I know a service can set both at start up. But i'm…
DoomVroom
  • 330
  • 2
  • 14
0
votes
1 answer

Implementing ASP.NET Forms Authentication and Authorization for Windows Forms or WPF standalone application

I wanted to implement an ASP.NET Forms Authentication and Authorization procedures for my Windows Forms or WPF applications communicating with an ASP.NET WCF(and SOAP) web services. Using Fiddler I investigated how Silverlight commnicates with its…
0
votes
1 answer

Configure MaxClockSkew in wsHttpBinding with TransportWithMessageCredential Security Mode

I have the following configuration for my service that is working fine. The problem appears when i need to change the value of MaxClockSkew in wsHttpBinding with TransportWithMessageCredential security mode. How can I change the MaxClockSkew value…
0
votes
1 answer

WCF SecurityNegotiationException when using certificate with none certificateValidationMode

I create a certificate with Pluralsight Selfcert. when I use it in wcf service it takes an SecurityNegotiation Exception. I search it and found a solution. I put certificateValidationMode="None" in clientCertificate of Web.config but problem not…
ArMaN
  • 2,306
  • 4
  • 33
  • 55
0
votes
0 answers

Getting Error in Self hosted WCF Service

We have WCF Service using basichttpbinding and it is hosted inside MVC application.On Testing stage,SSL certificate is enabled on MVC application site and load balancer is also there. We are getting below error while accessing service in console…
Sameer More
  • 589
  • 1
  • 6
  • 13