I've got a web service myservice.asmx. I'm currently allowing anonymous access to 9 out of 10 web methods in this serivce. However there is one web method in the service that I want to ensure to force windows domain authentication when the user attempts to invoke it. The method must know the domain account associated with the caller for authorization. Normally I would just move this one method to a new file and use the <location /> element in the web.config to deny anonymous on the new file but in this web site's architecture the name of the page actually has meaning and I cannot do this. How do I keep anonymous access to my 9 web methods but force windows domain authentication for just one?
...
Go to the complete details ...