When FIPS mode is enabled, PingAccess updates the security.providers list to use Bouncy Castle FIPS (BCFIPS) provider and removes all unneeded security providers that are not FIPS-compliant.

The PingAccess audit log indicates the FIPS mode status at startup.