Saml2AuthenticationToken implements Serializable, but cannot be serialized due to RelyingPartyRegistration, one of its members, not being serializable.
Comment From: jzheaux
Closed in favor of https://github.com/spring-projects/spring-security/pull/16287