5.9.8 Identifying Web Service Callers Without Authentication

Establishing the identity of the caller of the Web Service can be accomplished without formal authentication by including, for instance, the DDEX Party Identifier (DPID) of the Web Service caller into the URL syntax. However, not using formal authentication means that the web service cannot be certain that the caller is who it claims to be.