Specifying authentication information for a published web service
When you publish a web service, the consuming application can specify which user is authorized to perform the web service operations. Remedy Action Request (AR) System server checks whether the SOAP header contains the root XML data type AuthenticationInfo. This is an AR System XML data type, and consists of the child elements userName, password, authentication, locale, and timeZone. The timeZone child element is optional. When the AuthenticationInfo data type is included in the SOAP header, it should look like the following example:
<userName>Joe</userName>
<password>ILoveDogs</password>
<authentication>ARSystem</authentication>
<locale>en_US</locale>
<timeZone> </timeZone>
</AuthenticationInfo>
If the authentication information is not specified, AR server uses the Anonymous User Name and Anonymous Password defined in Remedy Mid Tier Configuration Tool.
Remedy Mid Tier Configuration Tool - WebService Settings
(Click the image to expand it.) 
You can use any name as the Anonymous User Name for development purposes, but for production, create a user name specific to the published web service.