title: Token based authentication with different types of clients in C#
body: <p>I am working on a project where we have different type of clients (winform App, ASP.net mvc, WCF service).</p>
  
  <p>I need to implement security in it. Here is my plan...</p>
  
  <ol>
  <li><p>There will be one service (planning to create as WebApi) to authenticate user.</p></li>
  <li><p>client app will pass Windows identity to this authentication service.</p></li>
  <li>Service will return authentication Token to user.</li>
  <li>This token will be passed to WCF service for each call.</li>
  <li>WCF service will verify this token using authentication service.</li>
  <li><p>If user has correct permissions, then WCF will perform requested action.</p></li>
  <li><p>If token expire then WCF service will renew the token using Auth service.</p></li>
  </ol>
  
  <p>I am planning to use attribute based programming for Security for each WCF call.</p>
  
  <p>I gone through lots of articles online but could worked out it.</p>
  
  <p>can anyone point me to some article where I an find below...</p>
  
  <ol>
  <li>Generate token based on Windows Identity.</li>
  <li>How to pass token to WCF service for each call.</li>
  </ol>
  
  <p>Thanks in advance.</p>