I have a SOAP to SOAP scenario in SAP CPI. The target web service expects the request with SOAP envelope along with wsse:Security headers. This is built in the source system and sent to CPI as it is. The request coming to CPI looks something like this: