When using a username/password token, first configure an appropriate realm and an appropriate user database for the realm.
Configuring a user database is discussed in To Edit a Realm.
Once the facilities are configured for use by message security providers, then the providers may be enabled as described in To enable providers for message security.