How to secure a web service with UsernameToken?

In this bolg post, I explain security policy basics with an example in Rampart.

There the service expects clients to authenticate themselves with username/password credentials.