Use Basic authentication with an SSL binding, and make sure that the site or application is set to require SSL. Alternatively, ...