The caller identifies himself by issuing Connection.setCredentials(). The corresponding User object is retrieved from the registry using the name given in the credentials. If the user record does not yet exist, it is created. This new user object is not added to any organization.

Here, the user name is the name attribute as inherited from the RegistryObject interface. It should not be confused with the user's PersonName.

The caller must be known before a connection can be used. In other words, setCredentials() is required, otherwise a security error occurs.