WCFSecurityGuide

Microsoft Patterns and Practices releases their WCF Security Guide, which is based on the work from their WCF Security Guidance Project. Per the WCF Security Guide CodePlex Site: "This guide shows you how to make the most of WCF (Windows Communication Foundation). With end-to-end application scenarios, it shows you how to design and implement authentication and authorization in WCF. Learn how to improve the security of your WCF services through prescriptive guidance including guidelines, Q&A, practices at a glance, and step-by-step how tos. It's a collaborative effort between patterns & practices, WCF team members, and industry experts." The introduction of the WCF Security Guide gives you a good summary of what the guide discusses: "This guide shows you how to improve security for your WCF services. It also shows you how to effectively design your authentication, authorization, and communication strategies for Microsoft® Windows Communication Foundation. The information in this guide is based on practices learned from customer feedback and product support, as well as experience gained in the field and while implementing real solutions. The guidance is task-based and presented in the following parts: Part I – Security Fundamentals for Web Services gives you a quick overview of fundamental security concepts as they relate to services, service-oriented design, and Service-Oriented Architecture (SOA). Part II – WCF Security Fundamentals gives you a firm foundation in key WCF security concepts, with special attention authentication, authorization, and secure communication, as well as WCF binding configurations. Part III – Intranet Application Scenarios shows you a set of end-to-end intranet application scenarios that you can use to jump-start your application architecture designs, with a focus on authentication, authorization, and communication for your intranet from a WCF perspective. Part IV – Internet Application Scenarios shows you a set of end-to-end Internet application scenarios that you can use to jump-start your application architecture design for the Internet from a WCF perspective."