title: How to secure a WCF service by session?
body: <p>My confession: I'm new to WCF, I've read something about it but just have got my hands on it for less than one week.</p>
  
  <p>I want to secure my WCF by session, which is, same as a webpage, at first the client need to identify itself, but when it's authenticated, the WCF service trusts it until the session is timeout.</p>
  
  <p>Because the service is time-critical, so the securing mechanism should be as minimal as possible.</p>
  
  <p>As said above, I have no experience with WCF, so I don't know is my idea can be done or not, and which mechanisms are using widely with WCF. </p>
  
  <p>Thank you very much.</p>