Check | Description |
---|---|
| Anonymous authentication is disabled in IIS. |
| ASP.NET is configured for Windows authentication. |
| Client credentials are configured at the client through the proxy object. |
| Authentication connection sharing is used to improve performance. |
| Clients are forced to authenticate on each call ( unsafeAuthenticatedConnectionSharing is set to "false"). |
| connectionGroupName is specified to prevent unwanted reuse of authentication connections. |
| Plain text credentials are not passed over the network. |
| IPrincipal objects passed from the client are not trusted. |