Stateless web service siebel - sametoken used more than once

Hi All,

I am trying to implement session management using custom soap headers in siebel web services.

I have completed following set up

1.Created stateless web service in application

2. Use eai_enu OM(UseAnonpool = Flase)

3. Set session timeout= Session token timeout = Session token maxage

I am able to hit initial as well as subsequent soap request from soap ui. I coupd see that

a subsequent request is processed when a sessiontoken is provided with session type = stateless.

However I have also noticed that a token can be used more than once.  i e if the token returned first time is used on subsequent request 1,2 3 etc all of them are getting processed too. They do also generate new key but I am not using them for the purpose of testing same token again.