PicketLink has SAMLv2 support for both JBossAS and a regular servlet container. The JBoss AS version contains deeper integration with the web container security such that you can make use of api such as request.getUserPrincipal() etc. Plus you can configure your favorite JAAS login module for authentication at the IDP side.

So, choose the JBossAS version of PicketLink . If you do not run on JBoss AS or Apache Tomcat, then choose the Section 14.5.13, “Standalone Web Applications(All Servlet Containers)” .