I want to secure my WCF services from unauthorized access. I am using ASP MVC as a front end to access my WCF services. Can I encrypt my services URL in JS file? And how I maintain the state management. I am calling my services directly through AJAX call and I am avoiding Model and Controller (using only for redirections from menu). What is the best approach to create SOA?