WCF Security Resources
This is a digest of WCF Security resources I was collecting for some time. Drop me a comment in case it is useful.
Guidelines
- patterns & practices WCF 3.5 Security Guidelines Now Available
- How Tos (WCF Security)
- WCF Security Learning Guide
- declarative security framework for Windows Communication Foundation (WCF)
- How To: Create a “Hello World” WCF Service Using Visual Studio
- How To Consume WCF Using AJAX Without ASP.NET
Input/Data Validation
Authentication
- WCF - Common Security Scenarios
- Certificate based Authentication and WCF
- Certificate based Authentication and WCF (Message Security)
- Certificate based Authentication and WCF (Transport Security)
- Certificate based Authentication and WCF (Mode independent)
- WCF Authentication: Custom Username and Password Validator
- Mapping Credentials to Authentication Schemes
Authorization
- WCF - Authorization
- RolePrincipal vs. RoleProviderPrincipal
- Building Claims-Based Security Model in WCF
- Building Claims-Based Security Model in WCF - Part 2
- Custom Principals and WCF
- Using IdentityModel: Adding ASP.NET Support Part 1 (Authentication based Claims)
- Using IdentityModel: Adding ASP.NET Support Part 2 (Claims Manager)
Session Management
Deployment
- Hosting WCF Services in ASP.NET - The Survival Guide
- WCF proxies in partially trusted ASP.NET Apps
- Hosting WCF Service in IIS
- Hosting and Consuming WCF Services
- Tradeoffs of IIS Hosting
- Setting a User Principal on the Endpoint
- Bindings and Security
- Controlling HTTP Connection Limits
- Walkthrough: Setting up a self hosted WCF Service with SSL
- WCF Security In Intranet Scenario : Thoughts On Cons and Pros
- Extend Your WCF Services Beyond HTTP With WAS
Sensitive Data
Auditing and Logging
- Tracing Across Services
- Troubleshooting WCF In Production Environments
- Using Service Trace Viewer for Viewing Correlated Traces and Troubleshooting