The Patterns & Practices Team have recently released v1.0 of the web services security guide (in PDF format) that shows how to make the most out of WCF.  With end-to-end application scenarios, it shows you how to design and implement authentication and authorization in WCF. Learn how to improve the security of your WCF services through prescriptive guidance including guidelines, Q&A, practices at a glance, and step-by-step how tos. It’s a collaborative effort between patterns & practices, WCF team members, and industry experts.

The guide has been released on CodePlex and is available for download.

Bookmark It

Hide Sites

Windows Communication Foundation Security Guidance

The intial release of the WCF Security Guidance from the Microsoft Patterns & Practices team has been released to Codeplex.  The guidance contains how-to video and articles that describe common security practices when designing, developing, and deploying services built on WCF.  The guidance content consists of the following:

How-To Videos:

• Host WCF in a Windows Service
• Impersonate the Original Caller in WCF calling from a Windows Form
• Using basicHttpBinding with Certificate Authentication from Windows Forms
• Use netTcpBinding with Windows Authentication and Message Security
• Use SQL Role Provider with Username Authentication in WCF calling from Windows Form
• Use WsHttpBinding with Certificate Authentication with Message Security
• Use WsHttpBinding with Windows Authentication and Message Security

How-To Articles:

• Create and Install Temporary Certificates in WCF for Message Security During Development
• Create and Install Temporary Certificates in WCF for Transport Security During Development
• Impersonate the Original Caller in WCF Calling from a Web Application
• Impersonate the Original Caller in WCF Calling from Windows Forms
• Use netTcpBinding with Windows Authentication and Transport security in WCF from Windows Forms
• Use SQL Role Provider with Username Authentication in WCF calling from Windows Forms
• Use SQL Role Provider with Windows Authentication in WCF calling from Windows Forms
• Use Username Authentication with the SQL Server Membership Provider and Message Security in WCF from Windows Forms
• Use wsHttpBinding with Windows Authentication and Message Security in WCF from Windows Forms
• Use wsHttpBinding with Windows Authentication and Transport Security in WCF Calling from Windows Forms

Bookmark It

Hide Sites