Probably it is well known, but I’ve only found it now: patterns & practices: WCF Security Guidance Project It is a complete book about WCF security on-line (you can download it or just browse through it). With its scenario-based approach and the practical samples and “how-to” chapters it seems to be very useful.