How to properly pass credentials from WCF service to another?

Question

I have a client application that calls a WCF service and passes client credentials like so:
OrderService.OrderServiceClient sc = new OrderService.OrderServiceClient();
sc.ClientCredentials.UserName.UserName = userName;
sc.ClientCredentials.UserName.Password = password;
The service uses custom authentication and validates the user/pass combination against my SQL db. All is well.
Now I have another WCF service, lets say Customer. In the OrderService I'm adding a Service Reference to the CustomerService and in the middle of one of the OrderService methods I want to call a CustomerService method. How can I pass the credentials? Please
note that the Customer and Order service ARE on the same IIS server. I am also using custom authentication.
It looks like I can access the username from the ServiceSecurityContext like so:
ServiceSecurityContext.Current.PrimaryIdentity.Name
Do I then have to make a trip back to the DB to get the password to send to the CustomerService call since it is not available? Seems silly... Any help is much appreciated. Thanks.
Should I be looking into impersonation?

Answer 1

Hi BBauer42,
Based on your description, I know that your scenario is Client-> OrderService->(Add service reference)CustomerService, then it seems that you want to implement the function like the double hop authentication. In my mind I think you try
to use the impersonation. The impersonation is a common technique that WCF services use to assume the original caller's identity in order to authorize access to service resource. In order to implement use the impersonation, we need do some configuration in
both service and IIS side, for more information, please try to refer to the following articles:
#Delegation and Impersonation with WCF:
https://msdn.microsoft.com/en-us/library/ms730088(v=vs.110).aspx .
#WCF: Learning Impersonation:
http://blogs.msdn.com/b/saurabs/archive/2012/07/16/wcf-learning-impersonation.aspx .
Best Regards,
Amy Peng
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.