SOAP authentication example

I realize this is an older thread, but hopefully still appropriate. I have created a SOAP RPC WSDL file in wM 6.1 that is being made available to a JSP developer. We’re running into what looks to be the common issue that everyone deals with, authentication. When the flow’s executable permission is set to Anonymous, the JSP page interacts with the web service with no issues. Once the ACL is set to anything else, a user name/password is needed. Not sure how to pass this information.

From reading the webMethods documentation and other forum posts, I am still having a problem determining what some of the options are to resolve this issue. Can I utilize basic authentication via the provided SOAP RPC processor, or do I have to configure a custom soap processor? The custom SOAP processor would parse out the soap header to retrieve the user name and password information, then invoke a service based on the qualified flow name.

Are there any built in functions or options on the JSP side that would allow the authentication information to be passed to webMethods without creating custom header variables?

Does anyone know if wM version 6.1 would support the WS-Security protocol that was recently approved?