title: WCF + AD FS Active Federation + Windows Authentication
body: <p>I am facing issue in creating claim aware WCF service using windows authentication.</p>
  
  <p>Enabled windows authentication in IIS. Disabled annonymous authentication. </p>
  
  <p>Service :</p>
  
  <p>
          
          
          
            
              
            
          
         </p>
  
  <p>Binding :</p>
  
  <pre><code>&lt;ws2007FederationHttpBinding&gt;
      &lt;binding name="ws2007FederationHttpBindingBindingdetails"&gt;
        &lt;security mode="Message"&gt;
          &lt;message establishSecurityContext="false" issuedKeyType="SymmetricKey" negotiateServiceCredential="false" algorithmSuite="Default" &gt;
  
            &lt;issuerMetadata address="STSAddress/mex" /&gt;
            &lt;claimTypeRequirements&gt;
              &lt;add claimType="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" isOptional="false" /&gt;
              &lt;add claimType="http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname" isOptional="false" /&gt;
            &lt;/claimTypeRequirements&gt;
          &lt;/message&gt;
        &lt;/security&gt;
      &lt;/binding&gt;
    &lt;/ws2007FederationHttpBinding&gt;
  </code></pre>
  
  <p>Facing below issue if trying to open the service </p>
  
  <p>The authentication schemes configured on the host ('IntegratedWindowsAuthentication') do not allow those configured on the binding 'WS2007FederationHttpBinding' ('Anonymous').  Please ensure that the SecurityMode is set to Transport or TransportCredentialOnly.  Additionally, this may be resolved by changing the authentication schemes for this application through the IIS management tool, through the ServiceHost.Authentication.AuthenticationSchemes property, in the application configuration file at the  element, by updating the ClientCredentialType property on the binding, or by adjusting the AuthenticationScheme property on the HttpTransportBindingElement.</p>
  
  <p>Is there any issue in binding? WS2007FederationHttpBinding doesnt have either of security modes Transport or TransportCredentialOnly</p>