Until now. if you were building a .NET client application for Live Framework you had to ask the use for his username and password and use that to log in on his behalf. In general its bad form to need to expose the credentials to anyone except the authentication