I asked our developer, and he said it's using Basic authentication.
Of note: in IE, I can use DOMAIN\username or just username and both versions work. Neither version works with invoke-webservice.
There are no strange characters in the username or password - just letters (upper and lower case) and numbers.
Also, I don't know if it matters, but notice that the webservice is using https.
-Rich