NimbostratusThe short answer to your question:
Is there a way to disable the automatic import of the soap address location from the WSDL file to the allowed urls list ?
is No.
When you create an XML profile with WSDL validation the system automatically associates a URL or parameter with the application based on the WSDL file. AS part of the XML profile security ASM enforces compliance against XML schema files or WSDL documents. Given that the URL is part of the WSDL the only way ASM can enforce compliance is through importing the URL and not allow modification.
Creating a Security Policy for Web Services:
