We should look into how to make the SAML 2.0 support native compatible. At first, it seems not viable for the Spring Security 6 GA since we are using the OpenSAML library and that library uses too many reflection making it very hard to add the necessary hints for an application to run without problems.

Comment From: marcusdacoregio

Another possibility is to use another library that does the same that OpenSAML is doing but without too much reflection usage.

Comment From: marcusdacoregio

This branch has some initial investigation work https://github.com/marcusdacoregio/spring-aot-smoke-tests/commit/897a1893a7035e2eb32577ab0c943a3aa24e9a95

Comment From: lorchr

Any plan / progress in the integration of native support of SAML2?

Comment From: marcusdacoregio

Not yet @lorchr. An alternative is to run your application using the Tracing Agent and include the generate runtime hints for the native compilation.