WSHttpBinding - Windows Auth with Delegation

I'm trying to call a web service which has a wshttpbinding which requires windows authentication. We have successfully been able to call the service using another tool and the config below but I'm having trouble setting up SoapUI to authenticate against the service. I keep getting the response that the message could not be processed due to invalid security. Has anyone had experience being able to setup the tool to call a service which requires windows credentials, delegation and server identiy as below. Or alternatively, is this somethig that cannot be done in SoapUI. Thanks heaps guys

<protocols scenario="customBinding" uiType="customBinding" xmlns="http://hp/ServiceTest/config">

  <mode>Private</mode>
  <customization>
    <textMessageEncoding />

     <security authenticationMode="SecureConversation">
      <secureConversationBootstrap authenticationMode="SspiNegotiated" />
    </security>
    <httpTransport authenticationScheme="Negotiate" />
  </customization>

  <identities>
    <server>
      <expectedUpn>***\STE1_SPM_EFI_SV</expectedUpn>
    </server>
    <client>
      <windowsCredentials allowedImpersonationLevel="Delegation">
        <username>testqa-gb</username> 
        <password>*********</password> 
        <domain>***</domain> 
    </windowsCredentials>  

    </client>    
  </identities>

</protocols>

Some snippets from the web.config that may assist

<wsHttpBinding>
        <!-- Default wsHttpBindings with long message sizes -->
        <binding name="WindowsAuthBinding" sendTimeout="00:10:00" messageEncoding="Text" maxReceivedMessageSize="75497472" maxBufferPoolSize="75497472">
          <readerQuotas maxArrayLength="75497472" maxStringContentLength="75497472" maxBytesPerRead="75497472" maxNameTableCharCount="75497472"/>
        </binding>
        <!-- CRS Binding -->
        <binding name="wsHttpBindingForCRS" maxReceivedMessageSize="16097152">
          <security mode="Transport"/>
          <readerQuotas maxArrayLength="16097152"/>
        </binding>
      </wsHttpBinding>

<service name="Afp.Entities.FinancialInstruments.Service.IisHost.FinancialInstrumentServiceWindows" behaviorConfiguration="ServiceWindowsAuthenticationBehavior">
        <endpoint address="" binding="wsHttpBinding" bindingConfiguration="WindowsAuthBinding" bindingNamespace="http://www.afp.gov.au/Entities/FinancialInstruments/2009/08/" contract="Afp.Entities.FinancialInstruments.Service.Contracts.IFinancialInstrumentService">
          <identity>
            <userPrincipalName value="AFP.STE\STE1_SPM_EFI_SV"/>
          </identity>
        </endpoint>
        <endpoint address="mex" binding="mexHttpBinding" contract="IMetadataExchange"/>
      </service>