Arajeh,
The user and password must be sent by the Client.
For example, if you are working on a Web client, you will use setUserName() and setPassword() of the
Connection object.
This data will be passed to the NotifyUser() method of your Metadata Adapter.