c# - How to require two different types of authentication within same WCF service -

i have existing wcf service uses transportwithmessagecredential security. requires username , password , uses customauthorizationpolicy , customusernamevalidator. configured within web.config in bindings / behaviors , works fine.

however, have requirement add new method service new vendor, , i'm being told new vendor uses java client , not able figure out how authenticate credentials in header, required other methods in service.

so i've been asked take username , password arguments new method instead, , use manually authenticate against our user store in database.

my question is, since want method included in same service requires authentication every other method, possible implement way single method exempt authorization / authentication policy other methods require?

you add endpoint doesn't use custom validator