SOAP security standards
The policy documentation can be found here.
The demo policy is divided into sections (make sure that they are named correctly and that the structure is understandable):
WS Security section begins with:
<wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy ... />
It defines rules.
<wsp:ExactlyOne>
Only one assertion is fulfilled.
<wsp:All>
All the assertions are fulfilled.