Confirm That the Security Policy Is Attached Correctly
You can access the IdcWebLoginPort wsdl to confirm that the security policy is attached correctly.
You should see the policy oracle/wss_username_token_over_ssl_service_policy being attached to the IdcWebLoginPort wsdl,

Description of the illustration confirm_attached_policy.png