I'm not convinced by ```pac4j-saml2```. I use ```pac4j-oauth``` for OAuth 1.0 & 2.0 support, I tend to think that ```pac4j-saml``` would be a better choice... Unless you "swear" that noone will ever ask for SAML 1.1...