I don't have any hand's on experience, but I know ...

# graviton-browser

[kastork]

I don't have any hand's on experience, but I know that our Active Directory server backs single sign on using Apereo CAS, which is a java server. Also, pac4j appears to support LDAP http://www.pac4j.org/docs/index.html