Wednesday, January 30, 2013

WCF Security: Transport Layer Security With Window Authentication

This blog will demonstrates how to setup the transport layer security with window aunthentication for wcf service 

1.       Add the following security configuration setting in Service config [binding configuration] file
   <security mode="Transport" >
       <transport protectionLevel="EncryptAndSign" clientCredentialType="Windows"></transport>
   </security>

2.       Add the following security configuration setting in Client config [binding configuration] file
  <security mode="Transport">

      <transport clientCredentialType="Windows" protectionLevel="EncryptAndSign" />

      <message clientCredentialType="Windows" />

 </security>

3.       Remove the all maxhttpbinding endpoints ( Service Config)
<endpoint address="mex" binding="mexHttpBinding" contract="IMetadataExchange" />

4.       Disabled anonymous authentication :  
    • Run AS :  inetmgr 
    • GO IIS Manager à Select Service Virtual Directory à Authentication  
    •  Authentication  à set the anonymous authentication disabled
5.       Enabled Window Authentication : 
    •         Run AS :  inetmgr
    •        GO IIS Manager à Select Service Virtual Directory à Authentication
    •        Authentication  à set the Window authentication enabled
    •        GO Advance Settings  à set the extended Protection value to Accept

No comments:

Building Secure API Platforms with Azure API Management

APIs are the backbone of modern applications. Mobile apps, web applications, partners, and internal systems all rely on APIs to exchange dat...