Questions tagged [wcf-security]

Questions related to the authentication and authorization services for Windows Communication Foundation (WCF) applications

Windows Communication Foundation is Microsoft's implementation of the WS-* web service specifications. Its security functionality mainly deals with authentication, authorization and secure over-the-wire transmission of user credentials.

When setting up WCF Security for an application, the following parameters need to be configured:

  • The type of credential required, e.g. NTLM, plaintext, or certificate authentication
  • The security mode: transport mode (e.g. SSL), message mode (SOAP message security), or a combination of both
  • Which endpoint(s) are protected

Once a client successfully connects to an endpoint protected with WCF Security, the server application can examine the security context to determine the identity of the client and to determine its authorizations (which need to be configured separately).

1285 questions
0
votes
1 answer

ASP.NET Forms Auth For Downstream WCF Authentication and Authorization

Development Environment: Windows 7 Enterprise with .NET 4.0 with Visual Studio 2010 Production Environment: Windows 2008 Server with IIS 7.0 I'm trying to figure out the best way to authenticate and authorize against a WCF service running on a…
Dan7el
  • 1,995
  • 5
  • 24
  • 46
0
votes
1 answer

Problem connecting with WCF service

Background: I have a WCF service deployed on my local machine that in turns connects to the SQL Server 2005 database. To consume the service, I have a client application that dynamically creates the service client to consume the methods exposed in…
Ashish Ashu
  • 14,169
  • 37
  • 86
  • 117
0
votes
0 answers

WCF Client fails with authentication error after host service restart

I have two WCF services on remote machines. Service A is hosted via IIS, Service B is self-hosted. Binding is set to basicHTTPBinding and no authentication is required. Service A calls Service B and passes some encrypted data. Both services…
rsoch
  • 23
  • 5
0
votes
1 answer

ado.net data services silverlight security

I have a application where the validation is done in the web server side (in the page). and the control is passed to the sl client. The SL client makes call to the ado.net data services for its query and wcf service for writing to the DB. How should…
bkhanal
  • 1,400
  • 3
  • 16
  • 24
0
votes
0 answers

Calling an external service method channel factory client

How would I call a service method using ChannelFactory. Here's my code to create the ChannelFactory: var b=new CustomBinding(); var…
0
votes
1 answer

WCF Windows Authentication not working

I've created a WCF service and I'm trying to set it up to disable anonymous access. I'm getting the following error when trying to add my service reference in an application: Security settings for this service require 'Anonymous' Authentication but…
0
votes
1 answer

WCF Error for some users

I have a Silverlight app that has some WCF services that it uses. When I run the silverlight app, everything works fine. Another person can use it just fine, however, the majority of users get an error. "An error occurred while trying to make a…
0
votes
2 answers

WCF Service windows authentication

a WCF Service in hosted in our internal server. an external client will consume it and, our Service will consume our SharePoint service in order to edit an item list. The WCF Service will have the automatically earn the windows authentication to…
lotusight
  • 5
  • 1
  • 4
0
votes
1 answer

Getting the IsAuthenticated status on WCF Data Services within the client

I have a wcf data service which authenticates the user with custom basic authentication. I used the tutorial on MSDN Blogs OData and Authentication – Part 6 – Custom Basic Authentication. So after authenticating the user against a database, the…
csteinmueller
  • 2,427
  • 1
  • 21
  • 32
0
votes
1 answer

WCF Client DLL Internet Delivery Problem

We are creating a WCF service with a companion client DLL (.Net) that we will be delivering to a user's GAC via a web page. The DLL knows how to communicate with and how to interface with the service, and will allow the web page to communicate with…
William Daniel
  • 679
  • 6
  • 14
0
votes
1 answer

WCF - Consuming SOAP Service Over HTTPS - Request Timeout

I have a WPF application, and I'm using WCF to consume a php webservice over Https, I've created a self-singed certificate on the server to test it and configured the client to use this certificate, but an exception appeared and tell me that I need…
karam
  • 3
  • 3
0
votes
1 answer

choosing wcf security mode

I am going to work on a wcf service that would expose our catalog information for several external organization to access. I would like to authenticate/authorize them using a simple table in my back end which contains their login information. (right…
cableload
  • 4,215
  • 5
  • 36
  • 62
0
votes
2 answers

Is a WCF service open for method calls for any computer in the network by default?

I have a silverlight web application and I am loading data to the client side using a wcf service. Should I secure the WCF service? Can anyone who's on the network call methods of the service?
Uğur Gümüşhan
  • 2,455
  • 4
  • 34
  • 62
0
votes
2 answers

Adding Second Layer Security for Wcf Service

I have hosted a Wcf Service When user login to his user account, it is my First layer security for the wcf service. that is normal windows login authentication. I want to provide a second layer security before accessing the Wcf Service. Second…
Raju S Nair
  • 333
  • 2
  • 5
  • 17
0
votes
2 answers

Recommended way of protecting web service (WCF) with IP?

I need to protect my WCF web services and was thinking what is the best way of doing this. Its not really a ROLE / User situation - more of a "WHO CAN CALL THE WEB SERVICE". I was thinking that i could use an IP? Is this the recommended way? Anybody…
mark smith
  • 20,637
  • 47
  • 135
  • 187