y - Net Developer

CHAPTER 7 ■ IMPLEMENTING WCF SECURITY 239ramrameshreddy.blog.comFigure 7-10. Access denied for users who do not have the correct rolesAuthorization Options for One-Way CommunicationsWhat happens when the message is only one-way? Is there a requirement to authorize thesender at the receiver’s end? Does WCF support this functionality? WCF implements mechanismsthat do not require any negotiation between the client and service. WCF supports aone-shot, or non-negotiated, security mode for this purpose. To support one-shot securitymode, you will set the flag negotiateServiceCredential="false" at the message level. However,you need to provide the valid credentials to authenticate the request. This will ensure themessage initiated from a trusted source even when the authorization is ignored at the serviceend. The following configuration snippet illustrates this feature:ramrameshreddyramrameshreddyWCF also implements multiple membership providers to assist developers to integrate toActive Directory, LDAP, and custom directory structures. You can also create your own providersto suit specialized scenarios. WCF also ships with multiple role provider classes that will reducedeveloper effort.