diff --git a/dependencies.gradle b/dependencies.gradle
index bde8642c811..addad7cd1c2 100644
--- a/dependencies.gradle
+++ b/dependencies.gradle
@@ -13,7 +13,7 @@ versions.tomcatCargoVersion = "10.1.44"
 versions.guavaVersion = "33.4.8-jre"
 versions.seleniumVersion = "4.35.0"
 versions.braveVersion = "6.3.0"
-versions.opensaml = "4.0.1"
+versions.opensaml = "5.1.6"
 
 // Versions we're overriding from the Spring Boot Bom (Dependabot does not issue PRs to bump these versions, so we need to manually bump them)
 ext["mariadb.version"] = "2.7.12" // Bumping to v3 breaks some pipeline jobs (and compatibility with Amazon Aurora MySQL), so pinning to v2 for now. v2 (current version) is stable and will be supported until about September 2025 (https://mariadb.com/kb/en/about-mariadb-connector-j/).