SAP NetWeaver
SOA Security Scenarios WebAS Java, Message Level Security with no Transport Guarantee
You are implementing SOA Interoperability scenario with message level security SAML. The consumer and provider are running on NetWeaver AS Java. This scenario doesn't require transport level security. It's suitable for internal landscape under firewall access where additional security (SSL) is not needed.