Hi,
If I understand you correct you want to use Authorization and Authentication.
Authentication can be implemented as Windows Authentication with active directory.
For Authorization you can use Message inspector.
For more about message inspector you can refer this link.
[<a href="http://msdn.microsoft.com/en-us/library/aa717047.aspx" target="_blank" title="New Window">^</a>]