hi,

did you check page 15 of the document suggested by Dario?
We're suggesting to authenticate your user with an SSL connection against your web server, than you'll send to lightstreamer a token (usually the session cookie) generated by the web server, not the password.
Once such token reaches your metadata adapter you'll validate it against your web server.