There is however one problem: there is an error when the ServiceHost tries to generate the WSDL (the first time there is a HTTP GET to it).This is so, because the security binding element requires the transport element to implement the ITransportTokenAssertionProvider.