<p>This is a follow on to this <a href="https://stackoverflow.com/questions/232500/how-to-configure-security-when-calling-wcf-service-from-net-20-client">question</a>.  I am trying to avoid using the x509 certificate method as that makes my client installs more complex.  If basicHttpBinding is not the only option, where are some samples of other binding methods.  </p>

<p>My clients are on .Net 2.0, I don't have access to System.ServiceModel namespace as that didn't come out until 3.0.</p>

<p>Update: To be clear, 
           clients: .Net 2.0, 
           web service: .net3.5/WCF</p>

You could require SSL + Username/Password with basicHttp.
First the below is what your client would use in .NET 2.0 to auth w/ your WCF service.
```
```
Dim client As WebServiceClient = New WebServiceClient("basicHttpWebService")
client.ClientCredentials.UserName.UserName = "username"
client.ClientCredentials.UserName.Password = "password"
```
```
Next, a sample config for your WCF service to require SSL + Membership provider credentials
```
```
<bindings>
            <basicHttpBinding>
                <binding name="basicHttp">
                    <security mode="TransportWithMessageCredential">
                        <transport/>
                        <message clientCredentialType="UserName"/>
                    </security>
                </binding>
            </basicHttpBinding>
        </bindings>
        <behaviors>
            <serviceBehaviors>
                <behavior name="NorthwindBehavior">
                    <serviceMetadata httpGetEnabled="true"/>
                    <serviceAuthorization principalPermissionMode="UseAspNetRoles"/>
                    <serviceCredentials>
                        <userNameAuthentication userNamePasswordValidationMode="MembershipProvider"/>
                    </serviceCredentials>
                </behavior>
            </serviceBehaviors>
        </behaviors>
```
```
The only thing I'm not sure about is that to use the first section in the client app you might need the WCF/WPF extensions CTP installed because I typically right click and "add service reference" instead of the ASMX "add web reference" - if so this extension for VS2005 does require .NET 3.0 to be installed.  But with a simple "add web reference" you should still be able enter a username/password ... I just don't know what this vb/c# would look like ...