The username is not provided. Specify username in ClientCredentials when use CreateChannel at Runtime

I’ve encountered a strange problem with WCF today, I have a custom Castle facility that is able to automatically create Wcf proxies with code, and it worked perfectly until I need to add a simple functionality: I want to be able to change at runtime some of the options of bindings that are configured in app.config. The solution was really simple, just write a method to retrieve the BindingConfiguration from the configuration file and the game is almost done.

public static Binding ResolveBinding(string name)
    System.Configuration.Configuration config =

    var serviceModel = ServiceModelSectionGroup.GetSectionGroup(config);

    BindingsSection section = serviceModel.Bindings;

    foreach (var bindingCollection in section.BindingCollections)
        var bindingElement = bindingCollection.ConfiguredBindings.SingleOrDefault(e => e.Name == name);
        if (bindingElement != null)
            var binding = (Binding)Activator.CreateInstance(bindingCollection.BindingType);
            binding.Name = bindingElement.Name;

            return binding;

    return null;

This code is really simple, it just opens the configuration file related to the entry assembly, get the the ServiceModelSectionGroup and then iterate through all BindingCollections (in Bindings section), looking for a Binding configuration with specified name. Once you find the configuration you can simply create an instance of the BindingType and use the ApplyConfiguration of the BindingElement to apply the configuration present in configuration file. Once you have the instance of the binding configured as for the config file you can simply modify all the option you need. My specific need is the ability to modify the useDefaultHttpWebProxy property, to be able to use or not use configured proxy as needed.

var binding = ResolveBinding(element.BindingConfiguration);
if (binding is BasicHttpBinding)
    BasicHttpBinding bhb = (BasicHttpBinding)binding;
    bhb.UseDefaultWebProxy = true;
else if (binding is WSHttpBinding)
    WSHttpBinding wshb = (WSHttpBinding)binding;
        wshb.UseDefaultWebProxy = true;

else if (binding is CustomBinding)
    CustomBinding cshb = (CustomBinding)binding;
        .UseDefaultWebProxy = true;

This code is really simple, I needs only to cast the binding to the correct type (I’m using BasicHttpBinding, WsHttpBinding and CustomBinding in this software) to set UseDefaultWebProxy value and the game is done. Now I only need to modify the piece of code that actually creates the proxy

MethodInfo createchannel = instance.GetType().GetMethod("CreateChannel", new[] { typeof(EndpointAddress) });
proxy = createchannel.Invoke(instance, new[] { endpointAddress });

the Instance variable contains a reference to ChannelFactory<T> and I create the proxy simply calling the CreateChannel (with reflection) passing the EndpointAddress. After a brief check on MSDN I found a version of CreateChannel that accepts a binding and not only an Endpoint element. In this page ( you can verify that a CreateChannel exists that accepts a binding and an endpoint address so I change the above code to invoke this version of the method. Everything works as expected, except that I got The username is not provided. Specify username in ClientCredentials error for all authenticated service; reverting the code to call the old Createchannel solved the problem.

I’ve lost half an hour wondering why credential are not passed to the server if I create the channel with the CreateChannel(Binding, EndpointAddress) but if I create the channel with CreateChannel(EndpointAddress) everything works as expected, until I realize my mistake. The CreateChannel(Binding, EndpointAddress) is a static method of the ChannelFactory, and when you create proxy dynamically with code, credentials are set directly inside the ChannelFactory, I’ve found my mistake.

When you create the proxy with instance method CreateChannel(EndpointAddress), it maintains a connection with the original factory, so it was able to grab credentials when needed from the factory, if you create the channel with the static CreateChannel(Binding, EndpointAddress) you are actually calling this code.


Figure 1: Reflected code of CreateChannel static method

As you can verify this method actually creates a new ChannelFactory passing the binding, then uses this new factory to create the channel, and credentials set into the original factory are lost, because the channel is actually created from another ChannelFactory instance. The solution is really obvious; use the CreateChannel(EndpointAddress) method, but changing the call to the constructor of the ChannelFactory to pass modified binding object. Everything now works perfectly, here is the code to create channel factory passing the binding.

instance = Activator.CreateInstance(channelFactoryBaseType, binding);

Gian Maria.

Published by

Ricci Gian Maria

.Net programmer, User group and community enthusiast, programmer - aspiring architect - and guitar player :). Visual Studio ALM MVP