How to turn off audit failure suppression

- J.D. Meier, Carlos Farre, Jason Taylor, Prashant Bansode, Steve Gregersen, Madhu Sundararajan, Rob Boucher

By default, WCF will ignore the audit failures and allow the service to continue running by setting the SuppressAuditFailure property to true. You can set this property to false which will turn off audit failure suppression, thereby throwing an exception when there has been an auditing failure.

Set the suppressAuditFailure property to false to turn off audit failure suppression:
<configuration>
  <system.serviceModel>
    <behaviors>
      <behavior>
        <serviceSecurityAudit
                  auditLogLocation="Application"
*                  suppressAuditFailure="false"*
                  serviceAuthorizationAuditLevel="Failure"
                  messageAuthenticationAuditLevel="SuccessOrFailure" /> 
      </behavior>
    </behaviors>
  </system.serviceModel>
</configuration>

Additional Resources

Last edited Jun 13, 2008 at 5:32 PM by prashantbansode, version 2

Comments

No comments yet.