WSE 2.0 Authentication Scheme For WebServices

I am running MS VS 2003 with WSE 2.0
I am trying to build a user authentication scheme for my webservices.
Below are the steps I am trying to follow:

1) Initially the user must provide a valid username/password and authenticate to a WebService/TokenManager at which point the user will be issued a unique token (Guid).
2) This unique token (Guid) will be stored in the Context.Cache of the Webservice (with a back up in the DB)
3) All subsequent calls to web services will require the unqiue token to be passed with it.

I wanted to use WSE 2.0 to handle all authentication. I am able to get the Username/Password to authenticate against the DB without a problem.
I CANNOT figure out
1. What type of token i should use to store the Guid
2. How to authenticate against the Guids stored in the Context.Cache

Is there a better way to handle authenticating repeated calls to webservices

Thanks

Answer this question

WSE 2.0 Authentication Scheme For WebServices

Yogesh Kumar Dhiman
Hello Empire29,

the best way to handle repeating calls is using WS-SecureConversation. It has clear performance advantages over other methods, by establishing a session and using symmetric encryption. Take a look to mgudgin article on the subject.
WSE 2.0 Authentication Scheme For WebServices

Answer this question