Multiple authentication in One WCF Service

Hello,
I need to use some authentication in my WCF Service, could you please if it is possible to use multiple authentication in One WCF Service? If it is possible, how to implement it.
Thank you.

Hi helloGoodman,
I wonder if you mean that you want to use multiple authentication in One WCF Service endpoint, if so in WCF 4.5, it is supported to use multiple authentication in a single endpoint, for more information,
please try to refer to the following articles:
#Using Multiple Authentication Schemes with WCF:
https://msdn.microsoft.com/en-us/library/hh556235(v=vs.110).aspx .
http://blogs.msdn.com/b/james_osbornes_blog/archive/2011/11/04/2-auth-modes-on-1-endpoint-using-multiple-authentication-schemes-with-serviceauthorizationmanager.aspx .
If you mean that you want to use multiple authentication in One WCF Service not in a single endpoint, then I will recommand you use multiple endpoints and in each endpoint you can use the independent authentication mode which you want.
Best Regards,
Amy Peng
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Similar Messages

WCF service setup with certificate authentication error

I have a WCF service setup and I need to use a certificate with it and are getting numerous errors when I attempt to browse it. The 1st error I get is "Security settings for this service require 'Anonymous' Authentication but it is not enabled for
the IIS application that hosts this service."
This sounds like a straightforward error message and setting the authentication method in IIS to anonymous resolves being able to browse the service. But I need to use a certificate and setting authentication to anonymous is obviously not right since we
only want those with the proper certificate to access the service. I have all authentication methods in IIS set to disabled when I get the above error message. I have the SSL settings in IIS for the service set to require a certificate as well. I am using
IIS 8.5 as well.
Here is my config file in hoping someone could point me in the correct direction. The service should only work over HTTPS since we are using a certificate and I need the meta data exposed as well hence the mexHttpBinding. I have searched the web but no solution
is working. Any help is appreciated.
<?xml version="1.0" encoding="UTF-8"?>
<configuration>
<configSections>
<sectionGroup name="applicationSettings" type="System.Configuration.ApplicationSettingsGroup, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089">
<section name="HEALookupProxy.Properties.Settings" type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" requirePermission="false" />
</sectionGroup>
</configSections>
<appSettings>
<add key="aspnet:UseTaskFriendlySynchronizationContext" value="true" />
</appSettings>
<system.web>
<compilation targetFramework="4.5.1" />
<httpRuntime targetFramework="4.5.1" />
<authentication mode="None"></authentication>
</system.web>
<system.serviceModel>
<serviceHostingEnvironment multipleSiteBindingsEnabled="true">
<baseAddressPrefixFilters >
<add prefix="https"/>
</baseAddressPrefixFilters>
</serviceHostingEnvironment>
<services>
<service name="HEALookupProxy.HEALookupService" behaviorConfiguration="HEALookupServiceBehavior">
<endpoint address="" binding="wsHttpBinding" contract="HEALookupProxy.IHEALookupService" bindingConfiguration="HEALookupConfig" />
<endpoint contract="IMetadataExchange" binding="mexHttpBinding" address="mex" />
</service>
</services>
<bindings>
<wsHttpBinding>
<binding name="HEALookupConfig">
<security mode="TransportWithMessageCredential">
<transport clientCredentialType="Certificate"/>
</security>
</binding>
</wsHttpBinding>
</bindings>
<behaviors>
<serviceBehaviors>
<behavior name="HEALookupServiceBehavior">
<serviceMetadata httpsGetEnabled="true"/>
<serviceDebug includeExceptionDetailInFaults="false" />
<serviceCredentials>
<serviceCertificate x509FindType="FindBySubjectName" storeLocation="LocalMachine" storeName="My" findValue="certnameremoved" />
</serviceCredentials>
</behavior>
</serviceBehaviors>
</behaviors>
</system.serviceModel>
<system.webServer>
<modules runAllManagedModulesForAllRequests="true" />

<directoryBrowse enabled="false" />
<security>
<authorization>
<remove users="*" roles="" verbs="" />
<add accessType="Allow" users="user1, user2" />
</authorization>
</security>
</system.webServer>
</configuration>

Hi spark29er,
>>The service should only work over HTTPS since we are using a certificate and I need the meta data exposed as well hence the mexHttpBinding.
For creating the HTTPS WCF service, first please change the mexHttpBinding to
mexHttpsBinding as following:
<endpoint contract="IMetadataExchange" binding="mexHttpsBinding" address="mex" />
For more information, please try to refer to:
#Seven simple steps to enable HTTPS on WCF WsHttp bindings:
http://www.codeproject.com/Articles/36705/simple-steps-to-enable-HTTPS-on-WCF-WsHttp-bindi .
Then please try to check the following article about how to do the certificate authentication on HTTPS WCF Service:
http://blogs.msdn.com/b/imayak/archive/2008/09/12/wcf-2-way-ssl-security-using-certificates.aspx .
Besides, setting the
includeExceptionDetailInFaults as false can give us more detailed error information.
Best Regards,
Amy Peng
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Multiple projects in one web role using Azure cloud?

How to run One webrole with multiple projects using azure?
In my solution One WCF service and ane website i want run both on one solution,
How to run both in one domain?
anilbabu

Thanks for replying,
I want to this type of output,
In my project one solution two projects(one website and one WCF service)
what i am asking is
this type
running both projects single service
http://postimg.org/image/oijwkbn7h/
After
i a hosting into azure that url's like this
How can i get this type of output
EX: http://multliplehos.cloudapp.net/
Service url: http://multliplehos.cloudapp.net/Service1.svc
anilbabu

Creating Multiple Projects in One Workspace

I've created a new workspace which has two new projects with
their own packages. When I try to import the package from
project2 into project1 JDeveloper can't find the class or source
files. It seems to only see files in it's own directory and not
one that aren't jar files. Is it possible to create two projects
simultaneously and have one project import from the other?

Thanks for replying,
I want to this type of output,
In my project one solution two projects(one website and one WCF service)
what i am asking is
this type
running both projects single service
http://postimg.org/image/oijwkbn7h/
After
i a hosting into azure that url's like this
How can i get this type of output
EX: http://multliplehos.cloudapp.net/
Service url: http://multliplehos.cloudapp.net/Service1.svc
anilbabu

Biztalk schema exposing as WCF service with multiple operations

Hi,
I am working on a design pattern to expose the BizTalk schema as a WCF service and thought of taking expert’s advice. I have a single schema with 30 different nodes and each one is a different message type. For this 30 message types we need to expose WCF
endpoints to customer for consuming from their application.
When I exposed this schema as WCF service, a single receive location got created in BizTalk application and in IIS there is one .svc file. I defined 30 operations for this while exposing the endpoint with wizard.
Currently I came up with the below 2 approaches but I did not like them as there is more redundancy
Create 30 different orchestrations and each orchestration subscribes to Message Box direct binding with message type as filter.
Create a single orchestration that binds to single receive location( this location got created by wizard..) and access the operation/message type in the expression shape. Based on this value create 30 IF conditions for each message type. For this the
single orchestration receive shape should have a message type of xml document and then access the type. Is it possible?
I don’t like the above approaches as it is very difficult to maintain and also difficult to add for any new message type.
Does anyone has good ideas for doing this?
Thanks
JB

"Canonical Schemas" are used where multiple source messages need to be addressed by a SINGLE Operation !!!
Every operation anyway translates to a separate process. Forget that we're dealing with BizTalk for a minute, when you're writing plain we services, you introduce new service contracts (operations) when you deal with different data contracts. To come back,
in BizTalk your data contracts are your schemas. So when you have multiple schemas, each requiring different processing then you need different orchestrations.
Let us for a minute assume you've defined a single service schema (very possible with a service header and a service details where the service data contract could differ). Now you use this schema to expose ONE service endpoint (good till now). In that service
you're suggesting to ADD decisions (something like a switch statement where you'll do 'x' set of activities is the message is of 'x' type and so on... How is this sustainable? Every time you introduce an new operation, you'll have to tear down and redeploy
the new orchestration which will affect all other operations. During the introduction of ONE op you may touch other parts of the orchestration (multiple branches in a parallel shape anyways make the orchestration very unwieldy from a code management/support
standpoint) and introduce errors in existing ops.
Regards.

Same WCF service endpoint to multiple topic/subscriptions

I have a WCF endpoint that I would like to subscribe to multiple topic/subscriptions with the same interface.
Then once it gets to the .svc, route based on the brokered message properties.
(This is sort of how we have it set up in Neuron ESB with service connectors).
This is so we don’t need a .svc file for every subscription in our setup.
When I try to add 2 endpoints in the web config, it throws:
The value could not be added to the collection, as the collection already contains an item of the same type: 'Microsoft.ServiceBus.TransportClientEndpointBehavior'. This collection only supports one instance of each type.
Here is my config:
<service
name ="SBWcfService2.TopicService">
<endpoint
name =
"TopicService"
listenUri="sb://localservicebus:10354/ServiceBusDefaultNamespace/wcftopic1/Subscriptions/Wcf2Sub"
address ="sb://localservicebus:10354/ServiceBusDefaultNamespace/wcftopic1"
binding="netMessagingBinding"
bindingConfiguration="messagingBinding"
contract="SBMessage.IMessageTopicContract"
behaviorConfiguration="endpointBehavior"/>
<endpoint
name =
"TopicService2"
listenUri="sb://localservicebus:10354/ServiceBusDefaultNamespace/wcftopic2/Subscriptions/Wcf2Sub2"
address ="sb://localservicebus:10354/ServiceBusDefaultNamespace/wcftopic2"
binding="netMessagingBinding"
bindingConfiguration="messagingBinding"
contract="SBMessage.IMessageTopicContract"
behaviorConfiguration="endpointBehavior"/>
</service>
So I took out the behaviorConfiguration in 1 of the 2 endpoint configs, this allowed me to hit the endpoint like every other time.
When it doesn’t work it gave me a 404 server error saying resource cannot be found.
Event viewer shows:
There was no channel actively listening at 'http://{{ServerName}}/SBWcfService2/TopicService.svc'. This is often caused by an incorrect address URI
If I change localservicebus to my computer name, I can hit the endpoint without the resource failure, but I can’t receive messages.
Searching online I couldn’t find much, the below link it the closest I could find with a similar problem:
http://stackoverflow.com/questions/25668693/system-argumentexception-while-browsing-wcf-service-with-multiple-azure-service
Any help would be greatly appreciated
Thanks,
-Nick N

This is one way to do it according to Microsoft
http://azure.microsoft.com/en-us/documentation/articles/service-bus-dotnet-how-to-use-topics-subscriptions/
The key point is: You don't listen to specific subscription, you listen to the service bus.
Here is a brief description of key steps
connectionString to your servicebus
Endpoint=sb://yourServiceNamespace.servicebus.windows.net/;SharedAccessKeyName=RootManageSharedAccessKey;SharedSecretValue=yourKey
Suppose Topics in your servicebus is Topic1
Suppose Subscriptions to your Topic1 are Sub1, Sub2
To receive messages from Topic1 for Sub1, Sub2
SubscriptionClient Client =
    SubscriptionClient.CreateFromConnectionString
            (connectionString, "Topic1", "Sub1"); //or change to Sub2
Client.Receive();
// Continuously process messages received from Sub1 (or Sub2) subscription
while (true)
   BrokeredMessage message = Client.Receive();
   if (message != null)
The web.config that listens to the topic for subscriptions looks like this
    <services>
      <service name="aaaaa">
        <endpoint address="sb://xxxxx.servicebus.windows.net/yyyyy"
                  behaviorConfiguration="sharedSecretClientCredentials"
                  binding="netTcpRelayBinding"
                  contract="wwwww"/>
      </service>
    </services>
    <behaviors>
      <endpointBehaviors>
        <behavior name="sharedSecretClientCredentials">
          <transportClientEndpointBehavior>
            <tokenProvider>
              <sharedSecret issuerName="owner" issuerSecret="zzzz"/>
            </tokenProvider>
          </transportClientEndpointBehavior>
        </behavior>
      </endpointBehaviors>
    </behaviors>
Frank

SAP Business One Integration Services Authentication Failed

Dear ,
ALL SAP forum members,
Iam Using SAP Business One 8.81 PL 06, Micorsoft SQL 2008 R2
In SLD B1DI and JDBC, the connections were tested successfully.
Whenever I log into SBO, I am getting "SAP Business One Integration Services Authentication Failed" error message. I did extensive research on all possible SBO documents dating 1 year back especially in B1ic Troubleshooting Document (New and Old) and searched the length of the SBO forums, but I could not a solution.
I uninstalled and reinstalled the B1f package many a time. The integration services we re also restarted many times and the connections were all tested successfully. Firewall, AntiVirus also checked.
In the B1f, in the Monitoring Window, the login is "Ok" but the AuthCheck is "Failed". I checked Authent.Monitor->Authentic Info and I found the following message under Action message "Wrong Usrname and Password".
I debugged and i found again "/com.sap.b1i.vplatform.scenarios.authen/sap.Xcelsius/Authenticate_Check.bfd
But could not understand much of it.
But i could go no further. The experts are requested to suggest their solutions, If any, to me as Iam stuck in this phase for the last 3 week
I hope some experts will guide me over this issue
Thanks and regards
Ashish Gupte

Hi Konstantin Ryahovsky
Thanks for your reply. My problem is solved.
And frankly speaking i dont know how it was solved. I have not uninstall, install ,not even i had restarted the server also.
only change i did in SLD >> Maintainance >>> cfg Runtime >>>> Put server IP address instead of server Name and restarted the services.
Thanks & regards
Ashish Gupte

How to keep multiple function modules under one Web service

Hi Experts,
I have Three RFC function modules and i need to create one web service for these three RFC function modules. I know How to crearte a web service for one function module.
please suggest me How to keep multiple function modules under one Web service.
Thanks in advance
Lakshminarayana

Hi Lakshmi,
The best way to do it is to assign all the three RFC Enabled FM's to one function group. Later on the top menu in Utilities you get an option to Create a Webservice from a Function Group.
You can create one single Webservice using all the the 3 FM's.
I hope this helps.
Thanks,
Manu

One Search service application for multiple web applications in a single server

We are planning to host 17 Web applications in a single Server. Do I need to create search service application for each web application or I need to create one Search service application , create a Content source for each web
application and create a Result source for filtering. Which is the best approach. And which approach takes more RAM memory.
In my application I am using Search web part, "Recently Changed Items", "Popular Items" web parts. when I created only one one Search Service application for all web applications and using Result sources ,
I am not getting the results. What could be the problem.

Hi,
One SSA is ok, but you should think about access rights. If the access is clear cut between all the web apps you should be ok with one SSA. Multiple result sources limiting on content source also works, but could easily be bypassed.
Multiple SSA's will eat up RAM/CPU like a mother :)
As for popular etc.. it could be due to how those sources are set up, but haven't investigated or tested this much.
Thanks,
Mikael
Search Enthusiast - SharePoint MVP/MCT/MCPD - If you find an answer useful, please up-vote it.
http://techmikael.blogspot.com/
Author of Working with FAST Search Server 2010 for SharePoint

Azure newby! Persist an object across multiple Azure WCF Service Calls.

I have created a small .NET Library (DLL) which does custom calculations and such.
I would like to create an Azure WCF service which basically wraps this libraries API.
The library, by necessity, is setup like an engine that must be initialized before use, so I don't want each and every service call to instantiate its own copy of the library. Is there a way to have the first call instantiate the library
and then persist it somewhere so that other service calls will just use the same instance?

Hello,
We are researching on the query and would get back to you soon on this.
I apologize for the inconvenience and appreciate your time and patience in this matter.
Regards,
Azam khan

How to design a wcf service for specific requirement

i have 2 question on wcf.
1) suppose some one develop a bus booking service using wcf and expose the same service over 2 different endpoint like tcp and http but i like to know what would be the advantage of having 2 or more endpoint for single service ? in what kind of situation
people use this trick? discuss in details.
2) how can i offer some extra functionality for tcp client. suppose my service has 5 function but http client can call only 2 and tcp client can call all. how do i design wcf service in this way. any idea would be appreciated. thanks

Hi Mou_kolkata,
>> 1)what would be the advantage of having 2 or more endpoint for single service ? in what kind of situation people use this trick? discuss in details.
In my mind the advantage of providing different endpoints for a single service is that each endpoint could use different binding and we would use different endpoints for logical grouping by function, we could also apply different levels of security
in the binding for each endpoint. For example you can expose an interoperable endpoint for Java, PHP, ... clients and a proprietary binary endpoint which could be faster but only for .NET clients.
Besides, please also try to check this similar thread:
http://stackoverflow.com/questions/6033788/when-why-would-i-use-multiple-endpoints-vs-a-single-endpoint-in-a-wcf-service .
>> 2) how can i offer some extra functionality for tcp client. suppose my service has 5 function but http client can call only 2 and tcp client can call all. how do i design wcf service in this way. any idea would be appreciated.
An esay way is to create two services. One service is for http client with 2 functions and the other service is for tcp client with 5 functions.
Or maybe you need do some authentication, for more information, please try to refer to:
http://stackoverflow.com/questions/11566182/how-do-i-restrict-access-to-some-methods-in-wcf .
Best Regards,
Amy Peng
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

No transport error while consuming WCF service in a REST way

Hi,
Here is a small article on when we usually face No Transport error and how to get rid of it.
I recently worked on a sample application using “app for Office” (New in Visual Studio 11.0)
What is “app for Office”?
An app for Office is basically a webpage that is hosted inside an Office client application. You can use apps to extend the functionality of a document, email message, meeting request, or appointment. Apps
can run in multiple environments and clients, including rich Office desktop clients, Office Web Apps, mobile browsers, and also on-premises and in the cloud.
What can an app for Office do?
An app for Office can do pretty much anything a webpage can do inside the browser, such as the following:
Provide an interactive UI and custom logic through      JavaScript. (Develop UI using HTML and JavaScript)
Use JavaScript frameworks such as jQuery.
Connect to REST endpoints and web services via      HTTP and AJAX.
Run server-side code or logic, if the page is      implemented using a server-side scripting language such as ASP or PHP.
As “app for Office” doesn’t have an option to write server side scripting (unlike code behind or in-line coding feature in ASP.NET/MVC) we will have to go for web service or WCF service and consume the service
using any JavaScript framework like Jquery.
I wrote a simple WCF service to hook up with server side code and consumed the service using Jquery as follows
$(document).ready(function () {
$.ajax({
type: "GET",
url: "http://localhost/MyService.svc/rh/data?id=" + $('#sampleType').val(),
processData: false,
contentType: "application/json; charset=utf-8",
dataType: "json",
crossDomain: true,
success: function (data) {
alert(data)
error: function (xhr, status, error) {
alert(error);
I encountered an error saying “No Transport” when I executed the client application.
I did some investigation on this and found out the root cause that cross-domain request was disabled. But I was really not sure whether it was at my WCF service end or “app for Office” client end. I added
Client Access policy and Cross-domain-policy xml files to WCF service in order to enable cross-domain request
so that service will accept any type requests sent form different domains.
Client Access policy
<?xml version="1.0" encoding="utf-8" ?>
<access-policy>
<cross-domain-access>
<policy>
<allow-from http-request-headers="*">
<domain uri="*"/>
</allow-from>
<grant-to>
<resource include-subpaths="true" path="/"/>
</grant-to>
</policy>
</cross-domain-access>
</access-policy>
Cross-domain-policy
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-http-request-headers-from domain="*" headers="*"/>
</cross-domain-policy>
Both the policies should be in different XML files
But this didn’t solve my problem. After a little bit more investigation I found exactly where and how to enable-cross domain requests.
Solution
We need to enable cross-domain requests in environments that do not support cross-domain requests.
“Cors is equal to true if a browser can create an XMLHttpRequest object and if thatXMLHttpRequest
object has a withCredentials property. To enable cross-domain requests in environments that do not support cors yet but do allow cross-domain XHRrequests (windows gadget, etc), set $.support.cors = true;”
You just have to add jQuery.support.cors = true; in your client scripting and it works perfectly fine.
[Cors- Cross-Origin Resource Sharing]
A simple example:
$.support.cors = true;
$(document).ready(function () {
$.ajax({
type: "GET",
url: "http://localhost/MyService.svc/rh/data?id=" + $('#sampleType').val(),
processData: false,
contentType: "application/json; charset=utf-8",
dataType: "json",
crossDomain: true,
success: function (data) {
alert(data)
error: function (xhr, status, error) {
alert(error);
Hope this will be helpful.
Thanks

This is very good technich to resolve the problem. but this is not working in Google chrome or Firfox . can any one help me.

How to properly pass credentials from WCF service to another?

I have a client application that calls a WCF service and passes client credentials like so:
OrderService.OrderServiceClient sc = new OrderService.OrderServiceClient();
sc.ClientCredentials.UserName.UserName = userName;
sc.ClientCredentials.UserName.Password = password;
The service uses custom authentication and validates the user/pass combination against my SQL db. All is well.
Now I have another WCF service, lets say Customer. In the OrderService I'm adding a Service Reference to the CustomerService and in the middle of one of the OrderService methods I want to call a CustomerService method. How can I pass the credentials? Please
note that the Customer and Order service ARE on the same IIS server. I am also using custom authentication.
It looks like I can access the username from the ServiceSecurityContext like so:
ServiceSecurityContext.Current.PrimaryIdentity.Name
Do I then have to make a trip back to the DB to get the password to send to the CustomerService call since it is not available? Seems silly... Any help is much appreciated. Thanks.
Should I be looking into impersonation?

Hi BBauer42,
Based on your description, I know that your scenario is Client-> OrderService->(Add service reference)CustomerService, then it seems that you want to implement the function like the double hop authentication. In my mind I think you try
to use the impersonation. The impersonation is a common technique that WCF services use to assume the original caller's identity in order to authorize access to service resource. In order to implement use the impersonation, we need do some configuration in
both service and IIS side, for more information, please try to refer to the following articles:
#Delegation and Impersonation with WCF:
https://msdn.microsoft.com/en-us/library/ms730088(v=vs.110).aspx .
#WCF: Learning Impersonation:
http://blogs.msdn.com/b/saurabs/archive/2012/07/16/wcf-learning-impersonation.aspx .
Best Regards,
Amy Peng
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Need to suppress Windows Security dialog when connecting to CRM WCF service from application

I am currently developing a Windows desktop application that uses the CRM WCF service as a data source. The CRM environment uses AD authentication. The problem I have is that our domain enforces a password expiration policy, so every three months each user's
CRM password changes, and the one stored for the user (in encrypted form) in the application becomes invalid.
When that happens, after logging into the application, the user is presented with a Windows Security dialog asking them to enter their network user credentials. If they do so the first time, they're asked up to a dozen more times, to authenticate a bunch
of OrgServiceProxy objects in a pool. This is confusing, frustrating, and dangerous from a security mindset (don't want the user getting too comfortable entering network credentials into every dialog that asks). I want to suppress this popup, and instead have
the CRM authentication immediately throw the SecurityNegotiationException I'm expecting if the credentials passed are wrong. The app will catch that and direct the user to the User Maintenance screen where they can update their credentials.
I know it's possible to put the site in a zone with custom security settings suppressing this prompt, but Group Policy to do that is kind of heavy-handed and could have unintended consequences. I would prefer a programmatic "quick fix" for now,
until we can re-architect the application's security layer to do all authentication against AD.
Thanks.

Hi friend,
This forum is to discuss problems of C# development. Your question is not related to the topic of this forum.
You'll need to post it in the dedicated ASP.Net Forum
http://forums.asp.net for more efficient responses, where you
can contact ASP.NET experts. Thanks for understanding.
Have a nice day!
Kristin

Cannot connect to the Service Manager portal WCF service - Error when opening SM Portal

Greetings,
I have tried everything I can think of to resolve this issue and I have tried all suggestions I have found on Technet.
Basically, I had the SM Portal working on a test VM. I am ready to use it in production but it is not working. I deleted my test VM and built a new one. On it, I have SharePoint 2010 Foundation and the SM Portal installed. I have
a valid self-signed cert. the FQDN is correct (hqsrva24.dds.local) in both SharePoint and also in IIS. I also made sure under Application Settings on the SM Portal IIS site points to the FQDN of the SCSMWebContentServer.
So what happens when I go to the SM Portal (https://hqsrva24.dds.local:444/SMPortal) is it prompts me for a logon, which i put in and the site comes up. But at that point the Silverlight portion is not loaded and I immediately get prompted for a logon.
I have tried several different logons, all of which have full access to the site in Sharepoint. Eventually I get the error in red at the bottom of the screen "Cannot connect to the Service Manager portal WCF service"
If I try to access the Web Content Server service on its own (https://hqsrva24.dds.local/Servicehost/services/DataAccessService.svc), I get a prompt to logon and none of my logons work. i eventually get
an unauthorized error. However; If I log into the server which SM Portal is on and go to https://localhost/Servicehost/services/DataAccessService.svc, I get no prompt to login and I get a "Metapublishing for this service is currently disabled."
I'm out of ideas at this point, barring completely starting over (not just the SM portal but all of the Service Manager Suite).

Man I've had this problem so many times and its almost always a different solution. Are you sure that either the Domain Users group or NT Authority\Authenticated Users have permissions to the site and service. remember the the two prompts are authenticating
different things: the Sharepoint site and the application site (silverlight). Make sure users have permission in both SCSM and in Sharepoint.
- Slow is smooth and smooth is fast.

Multiple authentication in One WCF Service

Similar Messages

Maybe you are looking for