Chapter 7. Security

In this chapter, we will cover:

• Setting up ad hoc Windows authentication over plain HTTP

• Getting an authenticated client identity in a service operation

• Using username authentication with an ASP.NET membership provider

• Sending a clear text username token over unsecured HTTP transport

• Using transport and message security at the same time

• Authorizing through declarative role-based access control

• Impersonating with a client caller identity

• Adding multiple tokens in a service request (supportingToken)

• Supplying dedicated credentials for firewall or proxy authentication

• Securing a dynamic SoapHeader