How to secure a WCF service for Project Server?

Question

I have a WCF service that collects and return the data from a Project Server database. The service will be online, so not everyone should have access to the service. What kind of security or authentication should I implement ?

Answer 1

Integrated Domain Security See MSDN WCF Security Page

I would run the application in a group or as user with the minimum required privileges.

http://msdn.microsoft.com/en-us/library/ms735093.aspx

If the machines are in a Virtual Machine you could even technically create a named pipe end point and then expose it to the children machines... but this is more advanced and you lose some of the options with TCP bindings.

You could also create a loop back adapter on the Host Machine and then use that adapter to forward to the service end point depending on origin. You would then expose the adapter to the children..

It all depends on how important security is and what you are trying to achieve in the end... e.g. is mobile going to be a concern...