That depends on the webservice you're consuming. If you're calling a Mendix webservice, then yes: you need to provide a username and password.