OAI protocol

Authentication

This is outside the standard. But if you want to access commercial datasets this is needed.
By Header
Identity: user:group:password
By Argument
verb=...&identity=user:group:password (this overrides the header)

Tracking-Id

This is outside the standard, however it is very useful for debugging.
By Argument
verb=...&trackingId=...