I am attempting to consume a web service through its corresponding wsdl. This service is dependent upon authentication conforming to [Web Services Security Basic Security Profile 1.0][1] including that the correct xmls namespace of http://docs.oasis-open.org/wss/2004/01/oasis-200401wss-wssecurity-secext-1.0.xsd must be included in the request.

Example:

    &lt;wsse:UsernameToken xmlns:wsse=&#39;http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd&#39; &gt;
       &lt;wsse:Username&gt;
          Bob
       &lt;/wsse:Username&gt;
       &lt;wsse:Password Type=&#39;http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText&#39;&gt;
          1234
       &lt;/wsse:Password&gt;
    &lt;/wsse:UsernameToken&gt;

  [1]: http://www.ws-i.org/profiles/basicsecurityprofile-1.0.html#UsernameToken

My first attempts were along the lines of `Add Service Reference` targeting the wsdl and from the generated proxies using them as such

    ServicePointManager.ServerCertificateValidationCallback = 
        (object s, X509Certificate certificate, X509Chain chain,
                         SslPolicyErrors sslPolicyErrors) =&gt; true;
    
    var basicHttpBinding = new BasicHttpBinding(BasicHttpSecurityMode.Transport);
    basicHttpBinding.Security.Transport.ClientCredentialType = 
                                                    HttpClientCredentialType.Basic;
    
    var endpoint = new EndpointAddress(&quot;https://secure-ausomxana.crmondemand.com/...&quot;
               
    using (var client = new ContactClient(basicHttpBinding, endpoint))
    {
                    
        var credential = client.ClientCredentials.UserName;
        credential.UserName = &quot;bob&quot;;
        credential.Password = &quot;1234&quot;;
    
        var input = ...    
        var output = client.ContactQueryPage(input);
    }

However attempting to interrogate the SOAP messages with Fiddler I see that no UsernameToken element has been added.

What is the correct way to fulfill this contract?

**Edit:** following the response from @John Saunders  I attempted to alter my code to use a wsHttpBinding

    var wsHttpBinding = new WSHttpBinding(SecurityMode.Transport);
    wsHttpBinding.Security.Transport.ClientCredentialType =
                                             HttpClientCredentialType.Basic;

Using this binding the SOAP message becomes 

    &lt;s:Envelope xmlns:s=&quot;http://www.w3.org/2003/05/soap-envelope&quot; xmlns:a=&quot;http://www.w3.org/2005/08/addressing&quot;&gt;
      &lt;s:Header&gt;
        &lt;a:Action s:mustUnderstand=&quot;1&quot;&gt;document/urn:crmondemand/ws/ecbs/contact/10/2004:ContactQueryPage&lt;/a:Action&gt;
        &lt;a:MessageID&gt;urn:uuid:17807f44-1fcasfdsfd&lt;/a:MessageID&gt;
        &lt;a:ReplyTo&gt;
          &lt;a:Address&gt;http://www.w3.org/2005/08/addressing/anonymous&lt;/a:Address&gt;
        &lt;/a:ReplyTo&gt;
        &lt;a:To s:mustUnderstand=&quot;1&quot;&gt;https://secure-ausomxana.crmondemand.com/Services/Integration&lt;/a:To&gt;
      &lt;/s:Header&gt;
      &lt;s:Body xmlns:xsi=&quot;http://www.w3.org/2001/XMLSchema-instance&quot; xmlns:xsd=&quot;http://www.w3.org/2001/XMLSchema&quot;&gt;
        &lt;ContactQueryPage_Input xmlns=&quot;urn:crmondemand/ws/ecbs/contact/10/2004&quot;&gt;
          &lt;ListOfContact xmlns=&quot;urn:/crmondemand/xml/Contact/Query&quot;&gt;
            &lt;Contact&gt;
              &lt;Id&gt;1-asdfd&lt;/Id&gt;
            &lt;/Contact&gt;
          &lt;/ListOfContact&gt;
        &lt;/ContactQueryPage_Input&gt;
      &lt;/s:Body&gt;
    &lt;/s:Envelope&gt;

This adds the Header element, as opposed to the `wsse:UsernameToken` element for reference the original soap message using the BasicHttpBinding is

    &lt;s:Envelope xmlns:s=&quot;http://schemas.xmlsoap.org/soap/envelope/&quot;&gt;
      &lt;s:Body xmlns:xsi=&quot;http://www.w3.org/2001/XMLSchema-instance&quot; xmlns:xsd=&quot;http://www.w3.org/2001/XMLSchema&quot;&gt;
        &lt;ContactQueryPage_Input xmlns=&quot;urn:crmondemand/ws/ecbs/contact/10/2004&quot;&gt;
          &lt;ListOfContact xmlns=&quot;urn:/crmondemand/xml/Contact/Query&quot;&gt;
            &lt;Contact&gt;
              &lt;Id&gt;1-asdfds&lt;/Id&gt;
            &lt;/Contact&gt;
          &lt;/ListOfContact&gt;
        &lt;/ContactQueryPage_Input&gt;
      &lt;/s:Body&gt;
    &lt;/s:Envelope&gt;

If I change the binding to be 

    var wsHttpBinding = new WSHttpBinding(SecurityMode.TransportWithMessageCredential);
    wsHttpBinding.Security.Transport.ClientCredentialType = HttpClientCredentialType.Basic;
    wsHttpBinding.Security.Message.ClientCredentialType = MessageCredentialType.UserName;

The SOAP message I get out is

    &lt;s:Envelope xmlns:s=&quot;http://www.w3.org/2003/05/soap-envelope&quot; xmlns:a=&quot;http://www.w3.org/2005/08/addressing&quot; xmlns:u=&quot;http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd&quot;&gt;
      &lt;s:Header&gt;
        &lt;a:Action s:mustUnderstand=&quot;1&quot;&gt;http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT&lt;/a:Action&gt;
        &lt;a:MessageID&gt;urn:uuid:eeb75457-f29e-4c65-b4bf-b580da26e0c5&lt;/a:MessageID&gt;
        &lt;a:ReplyTo&gt;
          &lt;a:Address&gt;http://www.w3.org/2005/08/addressing/anonymous&lt;/a:Address&gt;
        &lt;/a:ReplyTo&gt;
        &lt;a:To s:mustUnderstand=&quot;1&quot;&gt;https://secure-ausomxana.crmondemand.com/Services/Integration&lt;/a:To&gt;
        &lt;o:Security xmlns:o=&quot;http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd&quot; s:mustUnderstand=&quot;1&quot;&gt;
          &lt;u:Timestamp u:Id=&quot;_0&quot;&gt;
            &lt;u:Created&gt;2011-05-02T13:30:09.360Z&lt;/u:Created&gt;
            &lt;u:Expires&gt;2011-05-02T13:35:09.360Z&lt;/u:Expires&gt;
          &lt;/u:Timestamp&gt;
          &lt;o:UsernameToken u:Id=&quot;uuid-dc3605a0-6878-42f4-b1f2-37d5c04ed7b4-2&quot;&gt;
            &lt;o:Username&gt;Bob&lt;/o:Username&gt;
            &lt;o:Password Type=&quot;http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText&quot;&gt;1234&lt;/o:Password&gt;
          &lt;/o:UsernameToken&gt;
        &lt;/o:Security&gt;
      &lt;/s:Header&gt;
      &lt;s:Body&gt;
        &lt;t:RequestSecurityToken xmlns:t=&quot;http://schemas.xmlsoap.org/ws/2005/02/trust&quot;&gt;
          &lt;t:TokenType&gt;http://schemas.xmlsoap.org/ws/2005/02/sc/sct&lt;/t:TokenType&gt;
          &lt;t:RequestType&gt;http://schemas.xmlsoap.org/ws/2005/02/trust/Issue&lt;/t:RequestType&gt;
          &lt;t:Entropy&gt;
            &lt;t:BinarySecret u:Id=&quot;uuid-7195ad74-580b-4e52-9e2c-682e5a684345-1&quot; Type=&quot;http://schemas.xmlsoap.org/ws/2005/02/trust/Nonce&quot;&gt;bI4xuyKwZ8OkQYBRnz2LDNV+zhIOnl0nwP24yI1QAwA=&lt;/t:BinarySecret&gt;
          &lt;/t:Entropy&gt;
          &lt;t:KeySize&gt;256&lt;/t:KeySize&gt;
        &lt;/t:RequestSecurityToken&gt;
      &lt;/s:Body&gt;
    &lt;/s:Envelope&gt;

This seems to be very close however this appears to have actually encrypted the body of the soap message which is something I do NOT want to happen.

If I specify `wsHttpBinding.Security.Message.ClientCredentialType = MessageCredentialType.UserName;` with only using `SecurityMode.Transport` it goes back to where it says its anonymous. 

What is the final hurdle I&#39;m not able to clear on this?

**Final Solution:** Figured I&#39;d post this incase it helps someone, there&#39;s not really much different here other the UserToken object is wrapped in a Security node which is what my service provider required and seems to be how its output from my previous examples from what I could get generated.

    &lt;system.serviceModel&gt;
      &lt;bindings&gt;    
        &lt;basicHttpBinding&gt;
          &lt;binding name=&quot;Contact&quot; closeTimeout=&quot;00:01:00&quot; openTimeout=&quot;00:01:00&quot;
              receiveTimeout=&quot;00:10:00&quot; sendTimeout=&quot;00:01:00&quot; allowCookies=&quot;false&quot;
              bypassProxyOnLocal=&quot;false&quot; hostNameComparisonMode=&quot;StrongWildcard&quot;
              maxBufferSize=&quot;524288&quot; maxBufferPoolSize=&quot;524288&quot; maxReceivedMessageSize=&quot;524288&quot;
              messageEncoding=&quot;Text&quot; textEncoding=&quot;utf-8&quot; transferMode=&quot;Buffered&quot;
              useDefaultWebProxy=&quot;true&quot;&gt;
            &lt;readerQuotas maxDepth=&quot;32&quot; maxStringContentLength=&quot;65536&quot; maxArrayLength=&quot;131072&quot;
                maxBytesPerRead=&quot;32768&quot; maxNameTableCharCount=&quot;131072&quot; /&gt;
            &lt;security mode=&quot;Transport&quot;&gt;
              &lt;transport clientCredentialType=&quot;None&quot; proxyCredentialType=&quot;None&quot;
                  realm=&quot;&quot; /&gt;
              &lt;message clientCredentialType=&quot;UserName&quot; algorithmSuite=&quot;Default&quot; /&gt;
            &lt;/security&gt;
          &lt;/binding&gt;         
        &lt;/basicHttpBinding&gt;
      &lt;/bindings&gt;
      &lt;client&gt;
        &lt;endpoint address=&quot;https://secure-ausomxana.crmondemand.com/Services/Integration&quot;
           binding=&quot;basicHttpBinding&quot; bindingConfiguration=&quot;Contact&quot;
           contract=&quot;OnDemandContactService.Contact&quot; name=&quot;OnDemand.Contact.Endpoint&quot;&gt;
          &lt;headers&gt;        
            &lt;wsse:Security xmlns:wsse=&quot;http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd&quot;&gt;
              &lt;wsse:UsernameToken&gt;
                &lt;wsse:Username&gt;USERNAME&lt;/wsse:Username&gt;
                &lt;wsse:Password Type=&quot;http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText&quot;&gt;PASSWORD&lt;/wsse:Password&gt;
              &lt;/wsse:UsernameToken&gt;
            &lt;/wsse:Security&gt;
          &lt;/headers&gt;
        &lt;/endpoint&gt;
      &lt;/client&gt;
    &lt;/system.serviceModel&gt;

See https://stackoverflow.com/questions/14327960/with-c-wcf-soap-consumer-that-uses-wsse-plain-text-authentication/14334760 for how to configure it using code and not config

All Ws Security Solutions on Gang of Coders

Total of 1 Ws Security Solutions

Correct way communicate WSSE Usernametoken for SOAP webservice