Blog Header Menu

Wednesday, January 30, 2013

WCF Security: Transport Layer Security With Window Authentication

This blog will demonstrates how to setup the transport layer security with window aunthentication for wcf service 

1.       Add the following security configuration setting in Service config [binding configuration] file
   <security mode="Transport" >
       <transport protectionLevel="EncryptAndSign" clientCredentialType="Windows"></transport>
   </security>

2.       Add the following security configuration setting in Client config [binding configuration] file
  <security mode="Transport">

      <transport clientCredentialType="Windows" protectionLevel="EncryptAndSign" />

      <message clientCredentialType="Windows" />

 </security>

3.       Remove the all maxhttpbinding endpoints ( Service Config)
<endpoint address="mex" binding="mexHttpBinding" contract="IMetadataExchange" />

4.       Disabled anonymous authentication :  
    • Run AS :  inetmgr 
    • GO IIS Manager à Select Service Virtual Directory à Authentication  
    •  Authentication  à set the anonymous authentication disabled
5.       Enabled Window Authentication : 
    •         Run AS :  inetmgr
    •        GO IIS Manager à Select Service Virtual Directory à Authentication
    •        Authentication  à set the Window authentication enabled
    •        GO Advance Settings  à set the extended Protection value to Accept

No comments:

Post a Comment