By default, IS requires clients to authenticate (login) before they can invoke a service. This requires all web services consumers to at least use Basic Authentication to provide a set of credentials (username and password). When the request is coming in via HTTP, the credentials are passed in HTTP header variables (a standard part of the HTTP protocol).
Each programming language has its own set of methods for setting the values of HTTP header variables. I don’t recall the methods for VB .Net or C# off of the top of my head, but you need to use then to set the authentication type to “Basic” and then add the username and password to the credentials.
Perhaps one of our .Net developers can help or I’m sure you can find it in the docs. In the meantime, in Development only, you can set the ACL to anonymous as you have done to workaround this, just be sure to not promote this beyond your development environment.
Mark
#API-Management#webMethods#soa