Why not? The web service probably has a dedicated user. He can just check the created by of the SO.