2.2.1.4 UsernameToken Element
The <UsernameToken> element is specified in [WSS1] section 6.2, [WSS] section 6.2, [BSP] section 11, [WSSUTP] section 3, and [WSSUTP1.1] section 3. This document overrides the following specifications:
[WSSUTP] section 3.1, [WSSUTP1.1] section 3.1: For the Password/@Type attribute, the "#PasswordText" value MUST be used.
[WSSUTP] section 3.1, [WSSUTP1.1] section 3.1: The Nonce and Created child elements MUST NOT be used.
A <UsernameToken> element MUST NOT be referenced by a <SecurityTokenReference> element.