If you are using Ruby or Rails, there is a toolkit for integrating saml https://github.com/onelogin/ruby-saml

The SimpleSAMLphp project has been useful to me. It includes code for both a SAML Identity Provider and Service Provider.

I wonder how this relates to kerberos and/or LDAP systems with SPNEGO for http.