title: These policy alternatives can not be satisifed
body: <p>So I am trying to test a SOAP endpoint with SoapUI. </p>
  
  <p>This is how my SOAP request looks like </p>
  
  <pre><code>&lt;soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ns="http://docs.oasis-open.org/ws-sx/ws-trust/200512" xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"&gt;
     &lt;soapenv:Header&gt;
        &lt;o:Security soapenv:mustUnderstand="1" xmlns:o="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"&gt;
           &lt;o:UsernameToken u:Id="uuid-6a13a244-dac6-42c1-84c5-cbb345b0c4c4-1"&gt;
              &lt;o:Username&gt;username&lt;/o:Username&gt;
              &lt;o:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText"&gt;password&lt;/o:Password&gt;
           &lt;/o:UsernameToken&gt;
        &lt;/o:Security&gt;
     &lt;/soapenv:Header&gt;
     &lt;soapenv:Body&gt;
        &lt;ns:RequestSecurityToken Context="?"&gt;
           &lt;!--You may enter ANY elements at this point--&gt;
        &lt;/ns:RequestSecurityToken&gt;
     &lt;/soapenv:Body&gt;
  &lt;/soapenv:Envelope&gt;
  </code></pre>
  
  <p>I keep getting this response </p>
  
  <pre><code>&lt;soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"&gt;
     &lt;soap:Body&gt;
        &lt;soap:Fault&gt;
           &lt;faultcode&gt;soap:MustUnderstand&lt;/faultcode&gt;
           &lt;faultstring&gt;MustUnderstand headers: [{http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd}Security] are not understood.&lt;/faultstring&gt;
        &lt;/soap:Fault&gt;
     &lt;/soap:Body&gt;
  &lt;/soap:Envelope&gt;
  </code></pre>
  
  <p>If I change the value of <code>mustUnderstand</code> to 0, it gives this error</p>
  
  <pre><code>&lt;soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"&gt;
     &lt;soap:Body&gt;
        &lt;soap:Fault&gt;
           &lt;faultcode&gt;soap:Server&lt;/faultcode&gt;
           &lt;faultstring&gt;These policy alternatives can not be satisfied: 
  {http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/}SupportingTokens
  {http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/}UsernameToken&lt;/faultstring&gt;
        &lt;/soap:Fault&gt;
     &lt;/soap:Body&gt;
  &lt;/soap:Envelope&gt;
  </code></pre>
  
  <p>My security policy looks like below: </p>
  
  <pre><code>&lt;wsp:Policy xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
              xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"
              wsu:Id="UserNameWSTrustBinding_IWSTrust13Async_policy"&gt;
      &lt;wsp:ExactlyOne&gt;
          &lt;wsp:All&gt;
              &lt;sp:SupportingTokens xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/"&gt;
                  &lt;wsp:Policy&gt;
                      &lt;sp:UsernameToken
                              sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient"&gt;
                          &lt;wsp:Policy&gt;&lt;/wsp:Policy&gt;
                      &lt;/sp:UsernameToken&gt;
                  &lt;/wsp:Policy&gt;
              &lt;/sp:SupportingTokens&gt;
          &lt;/wsp:All&gt;
      &lt;/wsp:ExactlyOne&gt;
  &lt;/wsp:Policy&gt;
  </code></pre>
  
  <p>Not sure what I am missing now. Does anyone know what I am missing? </p>