I am trying to support single sign on from an external app (most likely a portal) using SAML. First, do you or have you or your clients implemented SAML?

If not, then what steps would I need to do to integrate with a SAML provider?

1. Create a LoginProvider
2. create an authenticator
3. create a UserManager

Could or Should I use one of the existing login modules?

1. nuxeo-platform-login-mod_sso
2. nuxeo-platform-login-portal-sso
3. nuxeo-platform-login-shibboleth

Supposedly Shibboleth supports SAML. Is that the best approach and can you give me guidance on using it?