views:

51

answers:

1

I have this binding:

<customBinding>
    <binding name="b1">
        <security authenticationMode="UserNameForSslNegotiated">
            <secureConversationBootstrap />
        </security>
        <binaryMessageEncoding/>
        <httpTransport/>
    </binding>
</customBinding>

When I use a sniffer to see the calls, I see that this does 3 round-trips per call.

By looking at the requests I see that

  • Message 1 is of type <t:RequestSecurityToken …>
  • Message 2 is of type <t:RequestSecurityTokenResponse…>
  • Message 3 is the real request

Is there a way pass credentials with the real message?

UPDATE Aug 23rd 2010: I still haven't found a solution to this problem.