Here is a short step by step guide on how to get your WCF service to perform Message and Transport level security over SSL with user name and password. I ran into this recently and thought should document it along with source code to provide reference for the rest of us.
1. If your development machine is XP (or 2K3 server) and you need dev SSL cert installed on it, follow the instructions mentioned in the articles here. The SelfSSL makes it real easy to do self signed certificates, literally one statement.
2. Create a WCF Service Project. Name the service and contracts appropriately. In my sample it is a simple contract like follows.
endpoint security download checkpoint endpoint security blog