Problem: How do I force the consumer of my web service to provide authentication credentials?
Situation:
1. I'm using a security certificate, so my browser users are required to login.
2. For testing, I added to my client app a web reference to the service. As expected, I was prompted for credentials. The client app works fine.
3. However, in third-party testing, I was surprised that my consumer could access the service before I gave him credentials to do so.
What do I need to implement to force consumers authentication before they can access the service?
...
Go to the complete details ...