5.3.7 Identifying Web Service Callers Without Authentication
Establishing the identity of the caller of the Web Service can also be accomplished without formal authentication (although in that case the web service cannot be certain that the caller is who it claims to be) by including, for instance, the DDEX Party Identifier (DPID) of the web service caller into the URL syntax.