WS-Context implementation is the responsibility of the SOAP stack. So IMO it is better addressed by an implementation such as Apache CXF.
PicketLink provides identity management solution. It does not address state information for WS.
In the absence of ws-c, I suspect you will have to handle it yourself or try to implement some kind of handlers to a soap stack to handle the ws-context information in the soap headers.