See those excellent articles:
- Fundamentals of WCF Security
- p&p WCF Security Application Scenarios
- MSDN Common Security Scenarios
- WCF Security Part 3 of 10
- WCF Security Guidance on Codeplex - basically covers everything there is, in great detail, sometimes almost a bit too much :-)
Marc
