System.ServiceModel 4.0.0.0 System.Object

This object is accessed from the binding by means of the property, which returns a object. The property provides a reference to the object.

Enables setting message-level security properties on the wsDualHttpBinding binding.

- Property
  4.0.0.0
  System.ServiceModel.Security.SecurityAlgorithmSuite To be added.

  This property is most relevant when working with a non-indigo1 platform that uses a set of algorithms that are different than the default. You should be aware of the strengths and weaknesses of the relevant algorithms when making modifications to this setting.

  Specifies the algorithm suite used for security messages at the SOAP level.

- Property
  4.0.0.0
  System.ServiceModel.MessageCredentialType To be added.

  This property is used to set the MessageCredentialType that is used to authenticate the caller at the service. Valid types are:

  Specifies the type of client credential used for client authentication in the wsHttpBinding or wsDualHttpBinding bindings.

- Method
  4.0.0.0
  System.Boolean To be added.

  Only used in extensibility scenarios to indicate whether an instance of a class derived from is configured to perform secure conversation as described in WS-SecurityConversation.

  Always returns true, unless overridden in a derived class.

- Property
  4.0.0.0
  System.Boolean To be added.

  Setting this property to true, requires WS-Trust and WS-SecureConversation to be supported by the client and the service. Setting this property to false does not require WS-Trust or WS-SecureConversation to be supported.

  For Anonymous, Username or Certificate client credential types, setting this property to false implies that the service certificate must be available at the client out of band and that the client must specify the service's certificate to use.

  In the case of Windows credentials, setting this property to false causes an authentication based on KerberosToken. This requires that the client and service be part of a Kerberos domain. This mode is interoperable with SOAP stacks that implement the Kerberos token profile from OASIS. Setting this property to true causes a SOAP negotiation that tunnels SPNego exchange over SOAP messages. This mode is not interoperable.

  This property indicates whether the service credential is negotiated automatically between the client and the service. If this property is true, then such negotiation occurs. If this property is false, then the service credentials must be specified at the client before communication with the service can occur.

  If this property is set to false, and the binding is configured to use Windows as a client credential type, the service account must be associated with a Service Principal Name (SPN). To do this, run the service under the NETWORK SERVICE account, or LOCAL SYSTEM account. Alternatively, use the SetSpn.exe tool to create an SPN for the service account. In either case, the client must use the correct SPN in the <servicePrincipalName> element, or by using the constructor. crdefault Specifying the Identity.

  Gets or sets a value that indicates whether the service credential is provisioned at the client out of band or is obtained from the service through a process of negotiation.