We have an application using Core Services to access/update data in Tridion Web 8.5.
The requirement is to ensure that username/password is not passed explicitly in config.

Is it possible to set integrated="true" for the <CoreServiceConfiguration> config in our application?
Example:
Instead of 

    <CoreServiceConfiguration bindingType="XYZHttp_TH" streamUploadBindingType="streamUpload_basicHttp_TH" userName="AbCd\custadmin" password="jgjhfgkdgfd">
  </CoreServiceConfiguration>

Can we write:

    <CoreServiceConfiguration bindingType="XYZHttp_TH" streamUploadBindingType="streamUpload_basicHttp_TH" integrated="true">
  </CoreServiceConfiguration>

If so what all changes would be required in our code base to accommodate this change?

Any help would be really appreciated.
TIA