Hi Jag, thanks for the reply. I ended up getting it working, I just overrode
the AuthenticateToken method.   I found the most difficulty in configuring
the web.config :)   I was trying to do it manually and kept running into
problems. Unfortunately a lot of the documentation doesn't explain what the
settings are for in the web.config very well (at least not what I was
looking at).  I ended up using the visual studio add-in tool to configure it
and everything has worked.  Also, I had to update the web references several
times.

My user authentication method is as follows:

protected override string AuthenticateToken(UsernameToken token)
 {

  ClassLib.User User; // My custom user class

  string sConnString = Utilities.ReadAppSettings("AdminConnectionString");
  User = new ClassLib.User(sConnString);

   // Queries Db to see if userId is valid
  if(User.GetUserAuthentication(token.Username, token.Password) >0)
  {
       return token.Password;
  }
  else
  {
       return "";
  }
 }

One thing that I don't like about this is that it has to authenticate the
user each time, which means a trip to the db each time. I may end up
creating a hash table to store all the authenticated users and search that
before querying the db.  The only downside there is if a user changes a
password (or user is deleted), I will have to make sure the hash table is
updated accordingly.

----- Original Message -----
From: "Jag" <jagdeepsahdeva@hotmail.com>
Newsgroups: microsoft.public.dotnet.framework.webservices.enhancements
Sent: Monday, June 21, 2004 8:15 PM
Subject: Re: WSE 2.0 Custom Authentication