<behavior>
          <serviceMetadata httpGetEnabled="true"/>
          <serviceDebug includeExceptionDetailInFaults="true"/>
            <serviceCredentials>
              <userNameAuthentication userNamePasswordValidationMode="Custom" customUserNamePasswordValidatorType="Example.CustomValidator, Example"/>
            </serviceCredentials>
        </behavior>

<service name ="Service.Services.Order">
        <endpoint binding="basicHttpBinding" bindingConfiguration="OrderConfiguration"
                  contract="Service.Interfaces.IOrder">
        </endpoint>
      </service>

Type serviceTypeOrder = typeof(Example.Services.Order);
            Uri[] serviceUriOrder = new Uri[2] { new Uri("https://192.168.1.5:1051/order"), new Uri("http://192.168.1.5:1050/order") };
            ServiceHost hostOrder = new ServiceHost(serviceTypeOrder, serviceUriOrder);
            hostOrder.Credentials.ServiceCertificate.SetCertificate(StoreLocation.LocalMachine,StoreName.My, X509FindType.FindBySubjectName, "MyCert");
            hostOrder.Credentials.ClientCertificate.Authentication.RevocationMode = X509RevocationMode.NoCheck;
            hostOrder.Open();

class CustomValidator:UserNamePasswordValidator
    {
        public override void Validate(string userName, string password)
        {
            if ((userName != "John") || (password != "1234"))
            {
                throw new SecurityTokenException("Validation Failed!");
            }
        }
    }

ServiceOrder.ClientCredentials.UserName.UserName = "John";
            ServiceOrder.ClientCredentials.UserName.Password = "123";
            idUser = ServiceOrder.GetIdUser(textBox1.Text,passwordBox1.Password);