Contrary to what I thought a month or so ago - you can get Custom UserName and Password authentication to work for WCF services in IIS for all endpoints (Transport-level security with WebHttp endpoint included). You just have to jump through a few hoops. [More]

Out of the box, it's impossible to get Transport-Level Custom Username Authentication on a WCF service hosted inside IIS. Find out why. [More]