Thanks Ronald.
I have found the issue. Its another jar file conflict. I found another bouncy castle jar
org.apache.servicemix.bundles.bcpg-jdk16-1.46.0.jar
which I had missed. Removal from the userlib resolves the conflicts. I’m still a bit bemused by the use of deprecated code within the SAML java objects in the latest versions though.
Could it be that you are on the V3 cloud? Because then the sollution would be that support adjust the permissions on that environment. I had that problem once. If not the V3 cloud or when you run loccaly I would just file a support ticket.
Regards,
Ronald