KB971831 - Allow token based authentication w/o transport or message encryption

Article Translations
English, Français, Deutsch, Italiano, 한국어, 繁體中文, 简体中文, 日本語, Русский, Português (Brasil)

Description
A Hotfix is a product update package with one or more updated product files that fix a specific product problem.

IMPORTANT NOTE

Please be aware this Hotfix has not gone through full Microsoft product regression testing nor has it been tested in combination with other Hotfixes.

Please carefully review the associated Hotfix KB article to verify the fix is the one needed and there are no known compatibility or installation issues. You may also want to contact a Microsoft Support Professional at http://support.microsoft.com

Issue Description

FIX: A hotfix that provides a method to support the token authentication without transport security or message encryption in WCF is available for the .NET Framework 3.5 SP1

Additional Information about the issue resolved by this Hotfix can be found in its Knowledge Base article at http://support.microsoft.com/kb/971831

Introduction
In Windows Communication Foundation (WCF) token-based authentication in Microsoft .NET Framework 3.5 Service Pack 1 (SP1), the CreateIssuedTokenOverTransportBindingElement method in the SecurityBindingElement class does not work for SharePoint Shared Services, because the services do not require message integrity or confidentiality.

The hotfix that is described in the article adds a CreateIssuedTokenOverUnsecureTransportBindingElement method. This method creates a security binding element that is configured to require SOAP security-based client authentication using an issued token. This binding element does not require the transport layer to provide message integrity or confidentiality.

Additional Hotfixes
Search the list of all other publicly available Visual Studio and .NET Framework Hotfixes at http://archive.msdn.microsoft.com/Project/ProjectDirectory.aspx?TagName=Hotfix&ProjectSearchText=Hotfix*