Write a SSO application on GAE

I'm looking for a so开发者_开发知识库lution to implement a SSO (single-sign on) application, and this app need to be in python and run on GAE (Google App Engine). This applications needs to be implemented using the SAML protocol, because Google Apps offers Single-Sign On based on SAML.

In my case I couldn't use OpenId because allow acces from external ID, and I need that my customers can login in my applications with only Google Apps accounts, then their accounts would be the ID. Once did the login they can access any applications offered by my company.

I saw the Gheimdall, but I couldn't install it completely to test, this applications is much complicated to make a proof of concept project, the last release was in 2008 and their documentation is poor.

Anyone knows a solution or tip to my problem?

Have a look at PySAML2, it should work with App Engine:

PySAML2 is a pure python implementation of a SAML2 service provider and to some extend also the identity provider. Originally written to work in a WSGI environment there are extensions that allow you to use it with other frameworks.