WCF Security Guide

On June 23, February 11, J. D. Meier announced the release of patterns & Practices WCF security guide on his blog. J. D. Meier wrote in his blog:
For end-to-end application scenarios, this Guide guides developers to design and implement authentication and authorization in WCF. With this standardized guide document (including guides, FAQs, and best practices), you can learn at a glance how to secure your WCF Service. This guide is the result of collaboration among patterns & Practices, members of the WCF team, and industry experts.

Through this guide, you can learn about the security of WCF, how to provide authorization and authentication for the Communication Design of the service, and how to use WCF for general distributed application development solutions, the principles, models, and practices for improving service security are also provided.
The structure of this guide is as follows:
Part 1: Security Basics of Web Services
Part 2: WCF Security Basics
Part 3: Lan application scenarios
Part 4: Internet application scenarios
This guide consists of 15 chapters:
1. Web Services Security Basics
2. Web Services threats and responses
3. Web Services Security Design Guide
4. WCF Security Basics
5. Authorization, authentication and identity in WCF
6. Simulation and delegation in WCF
7. Message and Transmission Security
8. Bind
9. Lan-Use Transmission Security (source caller, TCP) from the Web network to remote WCF
10. Lan-Use Transmission Security (trusted subsystem, HTTP) from the Web network to remote WCF
11. Lan-Use Transmission Security (trusted subsystem, TCP) from the Web network to remote WCF
12. Lan-Use Transmission Security (source caller, TCP) from Windows form to remote WCF
13. Internet-Use Transmission Security (trusted subsystem, HTTP) from the WCF and asmx clients to remote WCF
14. Internet-Use Transmission Security (trusted subsystem, TCP) from the Web network to remote WCF
15. Internet-Use Transmission Security (source caller, HTTP) from Windows form to remote WCF

You can download this document through codeplex, or read it online through msdn:

WCF security guide codeplex site: http://www.codeplex.com/WCFSecurityGuide

WCF security guide msdn documentation: http://msdn.microsoft.com/en-us/library/cc949034.aspx

Generic WCF error handler for ESB Guidance