how to use http authentication with IRIS SOAP service ?

a customer engineer asked me how to use Http basic authentication on a Ensemble SOAP service. Anyone has done this before? 

When secure SOAP service from Web Application setting, by select "password" for "Allowed Authentication Methods", it expected WSS, username and password in SOAP head. The customer hospital would like to add user authentication on sopa service, but SOAP client team prefer to add it on http header, instead of on SOAP header. 

Also, I am very confused with adding password on URL for SOAP service, like 

/devsys/csp/mysamples/MyApp.StockService.cls?IRISUsername=_SYSTEM&IRISPassword=SYS

does this work or not? for WSDL, the http GET works with the "IRISUsername=_SYSTEM&IRISPassword=SYS", does web service works with this URL? 

thank you