Robert:
The individual map/feature-services are placed in folders created by ArcGIS Server Manager. The folders are then assigned either a Public or Private security setting (see attached). For a folder with a Private setting, user role group(s) are assigned for allowed access. When accessing a Flex Web Map application page, with a map/feature service contained within a Private folder, a valid login is required.
The TOC widget works fine if the map/feature service is contained within a Public folder. If a map/feature service is contained within a Private folder the TOC widget still interacts correctly with the service, it just does not display the graphic symbol. If I load ESRI's Legend widget it correctly displays the feature graphic symbols regardless of containing folder security setting. I am using IIS authentication not token based.
Thanks for the help.