AS4 - clarification on pulling from the default channel with no WS-Security UserName tokens

[Theo Kramer <theo@flame.co.za>]

Hi All

I'm wondering if anyone could clarify what the expected use case should be when an AS4 pull signal message is received for the default MPC with no WS-Security user name tokens. 

Possibilities could include any of the following

i   Return any message stored on the default MPC for the default user as defined in section 4.3 of the ebms 3 core spec.

ii  Return an HTTP 401 authorisation failed unknown reason.

-- 
Regards
Theo