web services - WCF security with load balancer -

we need create wcf service (.net 4.0) consumed client outside of our organization.

the case have 2 servers behind load balancer terminates ssl. gets confusing me. how , should handle authentication?

the previous experience wcf services internal use. if understood correctly should use basichttpbinding guarantee interoperability java based client. don't know if issue jax-ws based client.

there 1 client going use service.

• we need somehow ensure caller authenticated use system
• make sure message encrypted when moving in public network

so far best article found http://devproconnections.com/net-framework/wcf-and-ssl-processing-load-balancers

there few suggestions how this.

wcf services can configured basic authentication , receive credentials in clear on http. can work; however, precludes passing credentials in message, , use of more interesting credentials (such issued tokens).

we use forms authentication on our website under service hosted. think not easy or possible make service use basic authentication.

wcf services can configured fake presence of transport security runtime allow receiving message credentials without transport or message protection

will way go , work basichttpbinding?

the client , server binding different. client binding use username auth in eitehr message or transport level transport security (ssl):

   <bindings>         <basichttpbinding>             <binding name="newbinding0">                 <security mode="message" />             </binding>         </basichttpbinding>     </bindings> 

then server config use same config without transport security. if chose use message security check out wcf clearusernamebinding. if use trasnport security (basic http) set mode="transportcredentialonly".