WS Security with ABAP 6.40

I tried to configure an ABAP Web Service with WS Security:

On the Web service definition I set basic authentication, no transport guarantee.

On the Web Service configuration I added WSS profiles for user name checks (no date). In the ICF I configured an anonymous login user (Web user without any authorization)

I did the same configuration on the client side:

Proxy: basic authentication

logical port: WSS profiles for user name and PW.

When I test the Web Service I get the following error: "SOAP Runtime: Exception message: Unexpected element -el=html ns="

Can I use WS Security to implement a login check for a specific Web Service or do I always need to configure digital signatures?

Many thanks for any hint!

Best regards,

Birgit