Matt Raible
I don’t think it makes any difference if you have one user accessing your app or thousands of users. The code will be the same. I do recommend using OIDC instead of SAML though, it’s much easier to work with in my opinion. See OAuth 2.0 Java Guide: Secure Your App in 5 Minutes for more information.