As of release 15.7 SP100, you must use sp_configure 'enable xml', 2 to enable an external entity reference in XML documents.
In previous releases, executing sp_configure 'enable xml', 1 enabled XML services with an external entity reference.
sp_configure 'enable xml', 1 enables XML services but not with external entity reference in XML documents.