View Single Post
Old 04-24-2008   #2 (permalink)
Priya
Guest


 

Re: WCF Security Question

Hi Sarasam,
You need to use Federation binding and implement an STS that will
issue the token. You can then use an authorization policy and/or
authorization manager with your specific service, and with the service
you can define MTOM for encoding.

Priya
On Apr 20, 2:28*am, Sarasam <Sara...@xxxxxx> wrote:
Quote:

> i have a WCF service(hosted in IIS) with the following configuration:
> basichttpbinding
> MTOM
> Streaming(for file upload and download)
> now i want to implement a security system where i receive username/password
> only once. after which i want to issue a custom generated token which should
> be used for all subsequent calls to service. i also want to control the
> expiration and renewal of the issued token. what should be my approach in
> order to acheive this?
> please advice, if possible with some code sample.