What kind of authentication is it? Is it the user entering the username and password into text boxes on a form or is it authentication via IIS? If it is via IIS then no, you don't have to change the website, you just pass the additional parameters. If it is is a username and password on a form then it seems that this control is too limited and you will want to use the example Eric provided.