Lamont Harrington's Blog

Windows Communication Foundation Security Guidance

The intial release of the WCF Security Guidance from the Microsoft Patterns & Practices team has been released to Codeplex.  The guidance contains how-to video and articles that describe common security practices when designing, developing, and deploying services built on WCF.  The guidance content consists of the following:

How-To Videos:

• Host WCF in a Windows Service
• Impersonate the Original Caller in WCF calling from a Windows Form
• Using basicHttpBinding with Certificate Authentication from Windows Forms
• Use netTcpBinding with Windows Authentication and Message Security
• Use SQL Role Provider with Username Authentication in WCF calling from Windows Form
• Use WsHttpBinding with Certificate Authentication with Message Security
• Use WsHttpBinding with Windows Authentication and Message Security

How-To Articles:

• Create and Install Temporary Certificates in WCF for Message Security During Development
• Create and Install Temporary Certificates in WCF for Transport Security During Development
• Impersonate the Original Caller in WCF Calling from a Web Application
• Impersonate the Original Caller in WCF Calling from Windows Forms
• Use netTcpBinding with Windows Authentication and Transport security in WCF from Windows Forms
• Use SQL Role Provider with Username Authentication in WCF calling from Windows Forms
• Use SQL Role Provider with Windows Authentication in WCF calling from Windows Forms
• Use Username Authentication with the SQL Server Membership Provider and Message Security in WCF from Windows Forms
• Use wsHttpBinding with Windows Authentication and Message Security in WCF from Windows Forms
• Use wsHttpBinding with Windows Authentication and Transport Security in WCF Calling from Windows Forms