WSIT: Client access to STS SAML token