6.4 Web service set-up and authentication
This standard does not define an authentication mechanism for the web service-based communication between companies. Should the two parties require their communication to be authenticated, they are free to use any of the existing web-based authentication methods including, but not limited to:
Basic Auth;
HTTP Digest Authentication;
HTTPS Client Authentication; or
OAUTH.