To understand the windows authentication mechanism better please refer: http://msdn2.microsoft.com/en-us/library/aa480475.... . The Scenario: A Web Application and WCF web service on Windows XP, where the Web Application uses services provided by WCF