Windows communication foundation comes with rich set of security such as transport level, message and transport with message; each of security type has its own advantages plus overheads as well For my application which has lots of diverse clients use to connect with the service and they have to be authenticated from Database, so the best possible solution to this problem was Message level security using custom Username - password authentication, After digging in to the net I found pieces of information and with some effort I implemented a concrete solution which will be helpful for others in terms of technical as well as for knowledge. Creating the serviceThe solution is are created using VS2010 contains three projects WCF service , website and desktop application which is client applicationRead more: Codeproject