Hi Jason, what about passwords, the nonce and timestamp elements which are also part of the Username token profile 1.0 spec? And last: what username is added to the soap header. Where does it come from? We need to support the username token profile standard and the clients are not alwasy JBoss Appservers but also .Net and Oracle Thanks in advance Karl View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3972615#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...