Thanks Benjamin for this info on how to encrypt a UsernameToken. I didn't happen to see it anywhere else. I mostly liked looking at the soap message to see the effect (note that username="John", password="Doe" and I am hashing the password in both cases and then encrypting the UsernameToken in the AFTER). Cool! I love this stuff. It's like a big game. Based on the length of the encrypted UsernameToken, can you tell what I used to encrypt it with?

BEFORE