5.3.7 Identifying Web Service Callers Without Authentication

Establishing the identity of the caller of the Web Service can also be accomplished without formal authentication by including, for instance, the DDEX Party Identifier (DPID) of the web service caller into the URL syntax. Although communication without formal authentication means that the Web Service cannot be certain that the caller is who it claims to be.