I have an asp.net mvc 2 web application that connects to a WCF web service hosted in IIS. This is in an intranet environment using windows authentication. I need to authenticate the user connecting to the web application inside inside of my WCF service, but the WCF cannot see who connected to the web app.
This can’t be a new problem, so how have some of you solved this issue?
Take a look at some of the intranet application scenarios on the below link:
CodePlex Security Guide
The following intranet scenarios are presented with security configuration guides and checklists that you might find useful:
Chapter 9 – Intranet – Web to Remote WCF Using Transport Security (Original Caller, TCP)
Chapter 10 – Intranet – Web to Remote WCF Using Transport Security (Trusted Subsystem, HTTP)
Chapter 11 – Intranet – Web to Remote WCF Using Transport Security (Trusted Subsystem, TCP)
Chapter 12 – Intranet – Windows Forms to Remote WCF Using Transport Security (Original Caller, TCP)