3.2.2.3.2 Specify Security Settings
If a higher-level protocol requires security for its remote procedure method calls, it MUST supply to the client-side implementation of the RPC the following runtime information:
What security provider it wants to use.
What authentication level it wants to use.
Optionally what impersonation level it wants to use.
A Client Credential Handle
Any other security provider–specific information necessary for the security provider to function.
Higher-level protocols can specify security settings using the abstract interfaces as described in Appendix C. Higher-level protocols on the Windows runtime can use the RpcBindingSetAuthInfo and RpcBindingSetAuthInfoEx APIs.