What does ArcWeb Services mean by authentication?
Any request to an ArcWeb service needs to include validating information that the request is coming from an authorized ArcWeb user. As a SOAP user, you can either authenticate yourself with a time-limited binary string returned from Authentication Web Service or include authentication information via a WS-Security header. See ArcWeb Services authentication for more information. REST and ArcWeb Explorer JavaScript users take advantage of UserID authentication.