Does ArcWeb Services support WS-Security?
Yes, the SOAP API supports WS-Security. You can use either WS-Security headers or Authentication Web service as your authentication method. ArcWeb Services supports WS-Security 1.0. Please note that only Axis (Java) and .NET toolkits support sending WS-Security headers. Glue and ColdFusion MX do not fully support WS-Security. See Using WS-Security with Axis (Java) and Using WS-Security with .NET for step-by-step instructions for configuring your requests with WS-Security headers.