Give me a day or two and I'll post back my results. Thanks!

Use 7-Zip to add to the archive. It has been my experience with other 'jar' archives that Windows or other 'zip' technologies can change the file signatures. 7-Zip has always allowed me to add things without breaking the archive. Please post your result if you use 7-zip.By the way, if you repackage with 'jar' and use '-cvMf', you must use a capital 'M' to preserve existing META-INF. The small 'm' means something else....

This is your SAML token is not configured correctly. However you configured the SAML OSGi configuration is not right. The first two lines are the same as my original post, which are okay to ignore, but the third line says your token is not right. That is a bit too detailed and far down for any advice from myself. Check your SAML configuration settings and try other tweaks and settings according to documentation, otherwise you will need to request support.

Clarification from a peer review: it does inline the blob store with the documented .config setting. My misinterpretations was to see the additional directories in the /repository folder. Question will be is it safe to delete the extra directories...blobids, datastore?"SegmentNodeStoreBuilder{blobStore=inline}" with the .config file customBlobStore=B"false" observed in error.log.SegmentNodeStoreBuilder{blobStore=DataStorebacked BlobStore [org.apache.jackrabbit.oak.plugins.blob.datastore.OakFileD...

I would suggest you make a small modification to the stop.bat file so that it removes the conf/cq.pid even on a successful ERRORLEVEL return code. Then, have your backup script detect the presence of conf/cq.pid (is removed) before starting the backup function using whatever method you are using. Put a timer loop in the backup script detection of the cq.pid file and fail out after some unusual amount of time (say 10-15 minutes) so that if the cq.pid file is never removed you get some message/err...