A SOAP client must successfully login before making any other API calls. The login function returns a session ID in the SOAP header. This session ID must be sent in the header of all subsequent function calls.