Transport Security – NetTcp binding, Authorization help

Hi,

 I have a scenario, where BizTalk receive location acts as WCF Service and a WCF client sends message to this location.

I’m trying to use net-tcp binding with “Transport” as Security and “Windows” as ClientCredentialType. I would like authorize only “XYZ” AdGroup to send messages to this receive location.

My question is how do enforce this.

thanks,