You are allowed to apply SAML requests and responses over any protocol you like. Whether you will be able to interoperate with absolutely everyone else is every other question. The SOAP-over-HTTP protocol is intended to be very simple to put in force and need to constitute much less paintings than enforcing SAML requests and deciphering SAML responses.
