title: WCF Web Service needs access to user name and password information
body: <p>I have build a wcf web service that simply provides MS Dynamics SQL data to a CRM hosted Silverlight application.  Currently the web services are hosted in IIS and are only available via HTTPS so the contents of the messages are secure.  I'm now ready to implement the next level of security that has to do with who is logged into the Silverlight client application.  I'd like to pass that information to the web service and then use it when creating the SQL Server Connection object.  The results will be that the MS Dynamics Database will then only return data that the connected user is authorized to view.</p>
  
  <p>This model is different from the standard model that consists of authenticating a given user for access to the web service.  Instead, in my model everyone is granted access to the web service and the results of the SQL queries are based on the user name and password for a given user.</p>
  
  <p><strong>For Clarification:</strong> The Silverlight application collects the user name and password from the user when they log on to the application.  This is the information that eventually needs to be used by the web service when the web service makes the connection to the SQL Server database.  So my goal is to have the Silverlight applicaiton pass the username and password to the web service in such a way that the web service can retrieve it and use it when creating the Connection object.</p>
  
  <p>I'm considering something as simple as adding the user name and password to each web service request.  However I'd rather be able to use the standard method for passing user credentials but I can't seem to find any way to get to the password.  The user name is accessable throught the OperationContext.Current.ServiceSecurityContext.PrimaryIdentity.Name.</p>
  
  <p>Any ideas?</p>