1.1.7.3.1 Transport Protection
Although it is not required to use TLS as a transport to carry an SAML security token to access Oracle Tuxedo through GWWS, it is recommended that the Web Service intermediary use TLS to access Oracle Tuxedo through GWWS using an SAML security token. The use of TLS ensures the SOAP message content from being disclosed or modified without detection This is particularly important when accessing Oracle Tuxedo services through a wide area network outside of a fire wall.
Parent topic: Configuring SAML Single Sign-On