Hi group

I am using WSE 3 Oct CTP and the username over transport assertion.

I created a Webservice and the corresponding proxy. Both decorated with
i the Policy attribute where I defined the policy (UserNameOverTransport).

I keep getting 401 - Access denied errors.

In the client I supply credentials by using the ClientCredentials
property of my WSE generated WS proxy class. I construct the credentials
using UserNameToken and with the parameters username, password and no
password encryption option as the last parameter.

There's no role authorisation on the server side.

Another question is of more general interest:

When my user gets authenticated (against Active Directory I guess) does
the roles (groups in AD) my user is in also get applied by the WSE
infrastructure, so that I can issue a IsUserInRole() from code to verify
the authorization inside a webmethod programtically?

Regards

Henrik

What can be wrong. I guess it is something really simple.