I don’t need to securitize my WCF services with windows principals at this point — at this point I tend to want various and sundry types to be able to access them. To affect this, I need to use a blank identity when I go to consume an endpoint.

From stackoverflow.com I saw that you can pass in an blank SpnEndpointIdentity when instantiating your communication layer:

    using con As new OfferingTap.OfferingTapClient( _
        new ServiceModel.InstanceContext(callback), "NetTcpBinding_IOfferingTap", _
        new ServiceModel.EndpointAddress(new Uri("net.tcp://qa1offerings:8190/"), _
        new ServiceModel.SpnEndpointIdentity("")))

In my config file, however, I just zap it out:

<endpoint address="net.tcp://localhost:8700/PCFComms/service"
    binding="netTcpBinding" contract="PCFCommsGateway.PCFCommsService"
    name="PCFComms">
    <identity />
</endpoint>