Edit

Share via

<transport> of <webHttpBinding>

  • Article

Defines the transport-level security settings for a service endpoint configured to receive HTTP requests.

<configuration>
  <system.serviceModel>
    <bindings>
      <webHttpBinding>
        <binding>
          <security>
            <transport>

Syntax

<webHttpBinding>
  <binding>
    <security mode="None|Transport|Message|TransportWithMessageCredential|TransportCredentialOnly">
      <transport clientCredentialType="None|Basic|Digest|Ntlm|Windows"
                 proxyCredentialType="None|Basic|Digest|Ntlm|Windows"
                 realm="string">
        <extendedProtectionPolicy policyEnforcement="Never|WhenSupported|Always"
                                  protectionScenario="TransportSelected|TrustedProxy">
          <customServiceNames>
          </customServiceNames>
        </extendedProtectionPolicy>
      </transport>
    </security>
  </binding>
</webHttpBinding>

Type

HttpTransportSecurity

Attributes and Elements

The following sections describe attributes, child elements, and parent elements.

Attributes

Attribute Description
clientCredentialType Specifies the credential used to authenticate the client to the service. This attribute is of type HttpClientCredentialType.
proxyCredentialType Specifies the credential used to authenticate the client to a domain proxy. This attribute is of type HttpProxyCredentialType.
realm A string that specifies the authentication realm for digest or basic authentication. The default is an empty string.

An authentication realm specifies at least the name of the host that performs the authentication. It can also specify a collection of users that has access. A user can query the authentication realm to ascertain which one of the several possible usernames and passwords can be used.
policyEnforcement This enumeration specifies when the ExtendedProtectionPolicy should be enforced.

1. Never – The policy is never enforced (Extended Protection is disabled).
2. WhenSupported – The policy is enforced only if the client supports Extended Protection.
3. Always – The policy is always enforced. Clients which don’t support Extended Protection will fail to authenticate.

clientCredentialType Attribute

Value Description
None Security is disabled.
Basic Uses basic authentication.
Certificate Uses X.509 certificates to authenticate the client.
Digest Uses digest authentication.
Ntlm Uses NTLM authentication as a fallback with a Windows domain.
Windows Uses integrated Windows authentication.

proxyCredentialType Attribute

Value Description
None Security is disabled.
Basic Uses basic authentication.
Digest Uses digest authentication.
Ntlm Uses NTLM as a fallback with a Windows domain.
Windows Uses integrated Windows authentication.

Child Elements

None.

Parent Elements

Element Description
<security> Represents the security capabilities of the <wsHttpBinding> element.

See also