As suspected, this did not move us on. Adobe have now requested the following:At this point could you setup a custom logger for the classes below,* org.apache.sling.auth.core* org.apache.jackrabbit.oak.security* org.apache.jackrabbit.oak.spi.security* com.adobe.granite.auth.samlThen perform a login ...