Wcf data service security configuration

I am in the process of configuring a WCF Data Services Web Service and I am trying to figure out security configuration. While there is a lot of documentation for configuring WCF security, many of it seems to be outdated or not applicable to my scenario.

Ultimately, I plan to manage the authorization of operations through change interceptors . So all I really need is the simplest way to allow the client to pass credentials along with the request and be able to authenticate those credentials against the AD or ASP.NET membership provider (I would prefer the latter, unless it does things much more difficult).

I intend to manage encryption at the transport level (i.e. HTTPS).

I hope that in the end the solution won't involve a huge web.config. Likewise, I would rather not write my own code for the purpose of authentication.