capturing and appending to HTTP::payload in a POST to a SAML assertions consumer URL

Are you attempting to actually add data to the POSTed SAMLResponse value? The good news here is that SAML POST response is usually not deflated, but base64-encoded, so with a layered VIP you could certainly look inside the assertion data. The problem is that this data is almost always digitally signed, so making any modifications would destroy the signature.