saml2api as it stands doesn't support clustering, because the EduPerson class is not serializable. This means that servers in a cluster cannot replicate SAML2 data received by one server in the cluster to the others. It is possible to work around this with host affinity, but this is not necessarily always a good solution. From the code it is not obvious how easy it is to solve this, as it's not clear what the EduPerson.feideMap can contain.
Also, this prevents saml2api from persisting user information during server shutdown.