Usually when we developing a WCF service in Intranet environment, we need to enable users to authenticate on IIS with there login credentials - Integrated Security. Assuming we using basicHttpBinding and we host the service library on IIS web site, This can be accomplished by the following settings: < bindings > < basicHttpBinding > < binding name ="basicHttpBindingConfig" > < security mode ="TransportCredentialOnly" > < transport clientCredentialType...
How do we know which binding to use and when? How do we know which security schema goes with our selected binding configuration? There's allot of considerations with the binding configuration: Is there IIS involved. Are we going to use IIS Integrated Security. Are we going to use net.tcp binding? There's also security issues we need to address: How we going to secure our services communication. Do we use the transport or the message layer. Setting Features Transport Server...