hello all

I am afzal

I have a simple scenario. I need to implement security with WCF . I have a database on my service side which acts as the user store. I want to pass credentials from the client, access and perform authentication on the service from my database. I don't want to use authentication against windows users.



how can i implement this using tcp and http. what sort of security should i apply; message or transport and how can i write my custom code to perform this authentication. i would be grateful if someone gives me a solution. I dont want to use transport security with http as I dont want to use SSL. what are the possible ways.



Thanks a lot in advance.

I think that the patterns and practices group has some content that will help you, though by this time you have probably found something else.

See http://www.codeplex.com/WCFSecurity

There are some end to end scenarios in there that can help, including your database scenario.


The WCF Security guide is still in process and so parts are incomplete, but it will be released this month (may 2008).


Also, if you are using Visual Studio you can use the Web Client Software Factory to automate some of your WCF work.

http://www.codeplex.com/websf


Rob




Rob Boucher