asp.net - Best way to handle WCF message authentication in the cloud (C#) -

i've looked many sources, , found many examples, none fit situation hope take project to. writing bunch of wcf services, publicly accessible, others not (server server), allow flexible cloud app ensures ability scale out service needed through azure. unsure way go message authentication, want make sure particular user logged in, can perform different tasks, , prevent others running tasks.

most of have seen uses roles or asp.net membership. have own custom membership users use login with, , don't rely on standard membership providers, or active directory. recommendation? thought creating token created on successful login, stored within cookie, added parameter passed each method, research, think might able handled without modifying methods.

what thoughts?

you can implement authentication without needing manually pass token functions using usernameauthentication , writing custom validator - there straightforward tutorial here

if use usernameauthentication, need use ssl/https, means you'll need server certificate - idea anyway business applications.

at server side can identity of current user:
iidentity wic = operationcontext.current.servicesecuritycontext.primaryidentity iidentity;