Is it possible to include binary data in an SAML Assertion token such that the token is used to identify a SOAP client by inclusion of the token in the SOAP Security Extension header i.e., <wss:security> element?

In the SAML spec it seems like there is a way to pass non-XML application data that may be processed by a receiving party's security service?

It is possible to include binary data in SAML token as part of <saml:Attribute> and would conforming WSS SOAP Security implementation accept a SAML token passed in the SOAP security header with binary token data included in the Assertion token containing AttributeStatement in binary form?

Any help will be appreciated.

Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software