Help needed to guide of using SAML SP as backend side of our product.

[Cantor, Scott]

> BTW, we are using both Apache tomcat and IIS.

Then you could use the Shibboleth SP in its standard form.

> Can you please recommend Java based SP, which can be
> used for our product, having documentation and forum for
> some basic guidance?

Java does not have a singular security model or API, so there is deifnitionally no such thing as "a Java SP", only those for different integration points and styles. I know of none of them other than Spring's and pac4j and I have no experience with any of them.

-- Scott