Project Summary

One of the little known features when using WCF with Silverlight 3, is that it now supports securing your WCF service with a custom username & password. In Silverlight 2, securing your WCF service with custom credentials wasn’t straightforward, you either had to manipulate the headers to send the username and password or rely on the browser to perform authentication.

Complete step by step tutorial can be found on Silverlight Tips here: http://silverlighttips.com/?tag=/securing+wcf+service

Releases

Download the latest release for this project from here: http://securewcfservice.codeplex.com/Release/ProjectReleases.aspx?ReleaseId=39985.

Development Summary

1. specify the security authentication mode

The tracking class is defined in your Silverlight project, it receives tracking parameter from anywhere in your Silverlight code and passes the parameters to a Java Script function to be sent to the analytics software using this method:

<security authenticationMode="UserNameOverTransport"/>


2. configure your WCF service to use SSL

3. set the userNamePasswordValidationMode and customUserNamePasswordValidatorType

4. implement a validator class

Last edited Feb 5, 2010 at 12:55 PM by d4moon, version 3