ADF embed BIP Error 401--Unauthorized

I am trying to embed BIP report in one jspx page according this document named Using BI Publisher with Oracle JDeveloper. Which use one adf component BIPRegion, and config BIP information in xmlp-client-config.xml. Like this:

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE properties SYSTEM "http://java.sun.com/dtd/properties.dtd">

<properties>

  <comment>BIP Server Information</comment>

  <entry key="bipuri">http://yourbipserver:7001/xmlpserver</entry>

        <entry key="username">weblogic</entry>

        <entry key="password">password</entry>

</properties>

If I add policy in server and client like the document, there is always one error: oracle.j2ee.ws.client.jaxws.JRFSOAPFaultException: Client received SOAP Fault from server : InvalidSecurityToken : The security token is not valid.