Meet WSSE; The Token; The Listener; The Authentication Provider; The Username / Password encryption; Safe guarding against replay attacks; No A security listener should handle the GetResponseEvent event, and set an authenticated token . As WSSE does not require maintaining authentication sessions or login .