I am developing a WCF service that receives the user’s credentials in the SOAP header. These credentials are read on the server side using a MessageInspector. So far so good.
I want to set the Thread.CurrentPrincipal to a custom principal (CustomPrincipal), but when I do this from the MessageInspector, it gets overridden by the time the service is invoked. When is the best time to set the principal? Also what is the best way to pass the principal, identity or credentials from the inspector to that location?
Rory has a post that describes a solution to this problem.
http://www.neovolve.com/2008/04/07/wcf-security-getting-the-password-of-the-user/