如何在WCF中实现客户端和服务器之间的身份验证？

I need to implement a model, where only an authorized set of clients can use a WCF server. I thought of something along passing an AUTH structure as a param inside each method call. Is this the best method to implement this kind of security, or is there an easier/better way of doing this? for example i developed and publish the service like below: I need to implement a model, where only an auth