The stack trace does not seem to have much to do with the allowed groups, so not sure how it's linked. I created OIDC-211 for the nullpointerexception when a logout is done without a xredirect (which is what the null value seems to mean according to the code).
This message was sent by Atlassian Jira (v9.3.0#930000-sha1:287aeb6)
If image attachments aren't displayed, see this article.