RE: Integrated Web Server Authentication

["Coyle, Stephen F." <SCoyle@xxxxxxxxxxxxx>]

The service itself returns data from our purchasing module. The fear is
that someone discovers the service is available and accesses it without
authority. The request parameters are easily identified to figure out
what's needed. I was hoping there was some way to configure the server
that would make the user id visible to the web service without relying
on any kind of client mechanism. I don't have any experience with the
admin side of either the http or the app server so I was wondering what
others have done who may have gone down this road. 

Thanks...
- Steve