Accessing BasicHttpBinding endpoint fails with System.ServiceModel.Security.SecurityAccessDeniedException: 'Access is denied.'

Question

I have a WCF service exposing basic HTTP binding and HTTPS binding (with federation). The client app can access the service with HTTPS, but the basic HTTP endpoint method ac