diff --git a/docs/framework/wcf/load-balancing.md b/docs/framework/wcf/load-balancing.md index c1f674344552e..828a67a05b6c7 100644 --- a/docs/framework/wcf/load-balancing.md +++ b/docs/framework/wcf/load-balancing.md @@ -79,7 +79,9 @@ One way to increase the capacity of Windows Communication Foundation (WCF) appli Both the and the can be load balanced using HTTP load balancing techniques provided several modifications are made to the default binding configuration. -- Turn off Security Context Establishment: this can be accomplished by the setting the property on the to `false`. Alternatively, if security sessions are required, it is possible to use stateful security sessions as described in the [Secure Sessions](./feature-details/secure-sessions.md) topic. Stateful security sessions enable the service to remain stateless as all of the state for the security session is transmitted with each request as a part of the protection security token. Note that to enable a stateful security session, it is necessary to use a or user-defined as the necessary configuration settings are not exposed on and that are provided by the system. +- Turn off Security Context Establishment or use stateful security sessions. Security Context Establishment can be turned off by setting the property on the to `false`. If you are using or security sessions are required, it is possible to use stateful security sessions as described in [Secure Sessions](./feature-details/secure-sessions.md). Stateful security sessions enable the service to remain stateless, as all of the state for the security session is transmitted with each request as a part of the protection security token. To enable a stateful security session, you must use a or user-defined , as the necessary configuration settings are not exposed on the system-provided and . + +- If you turn off Security Context Establishment, you also need to turn off Service Credential Negotiation. To turn it off, set the property on the to `false`. To disable Service Credential Negotiation, you may need to explicitly specify the endpoint identity on the client. - Do not use reliable sessions. This feature is off by default.