I have played with the Hands-On-Lab HOLDEVL34. It is very good and I learned
a lot!

In exercise C (Automating Security with Policies), policies are used to get
the sample working. The client sends a username token to the server, and the
server authenticates the token against the windows identity.

By playing with different situation I figured that I get the following
message:

   WSE402: The Message does not conform to the policy it was mapped to.

This happens as soons as I use a "Role" policy on the server. Eg. I define a
endpoint and assign a role to that.
I have not tried this with Certificates as outlined in the HOL.

Any Comments?
Thankx, Cheers Harry