What is the best authentication method through WCF?

Question

What is the best way to implement WCF authentication?

I would prefer not to use WS- *, as it should be independent of transport.

Should I "roll my own"? Are there any recommendations for this (articles / blog posts)?
Or is there a way (and should I) use the server side built-in ASP.NET Membership and Profile Provider?

Answer 1

WS-Security based message authentication is what you are looking for and is definitely supported by basicHttpBinding and netTcpBinding. I think you mistakenly believe that only WsHttpBinding will support WS-Security, which is inaccurate.

WS binding for WS- * items other than WS-Security, such as WS-ReliableMessaging. Configuring message-free transport security will still be difficult if you want it to remain secure. For transports that are not duplex, you must have at least one certificate exchanged in advance.

, , basicHttpBinding. basicHttpBinding UserName ( - ). , , .

, , , , - , () () . , , . , , .

Answer 2

WS- * ?

WS- * , , , .

Answer 3

WS- * . .

, . , , , .

API WS- * , ( , GUID , ).

Answer 4

.

, . , , , . basicHttpBinding netTcpBinding, , WS- * - .

Davids - , . , .

Answer 5

If you are breaking an external service that requires user level authentication / authorization, I would recommend using an ASP.NET provider.

Here's a useful utility here that allows you to remotely administer an ASP.NET provider. ASP.NET solution requires SQL ...