We are currently upgrading our CMS environment, and we're connecting our new Tridion CM to our existing TMS server (https://(clientname).sdlproducts.com).
However, during the installation, we never have to fill in any login or password to authenticate our CMS with the TMS server, but still we are able to send jobs for translation.
Does this mean that, in theory, I could hook up any CMS server to use a certain TMS server endpoint, and get translations (I do realize that the real users would fairly quickly detect this abuse, but still this doesn't look right).
Or is there any kind of authentication happening behind the scenes?