Get application credentials from linked array obtained from Cloud Foundry API
Consider breaking this into more, reusable methods.  E.g. 

public Map&lt;String, Object&gt; getCredentials(String url, String org, String space, String app)
        throws MalformedURLException {

    GetApplicationEnvironmentsRequest request = GetApplicationEnvironmentsRequest.builder()
            .name(app)
            .build();

    Map&lt;String, Object&gt; mapSystemProvided = sm
            .getCurrentUserCfClient(new URL(url), org, space)
            .applications()
            .getEnvironments(request)
            .block()
            .getSystemProvided();

    Map&lt;String, Object&gt; SERVICES = (LinkedHashMap&lt;String, Object&gt;) mapSystemProvided.get("SERVICES");
    List&lt;Object&gt; apps = (ArrayList&lt;Object&gt;) SERVICES.get("apps");
    Map&lt;String, Object&gt; appsList = (LinkedHashMap&lt;String, Object&gt;) apps.get(0);

    return (LinkedHashMap&lt;String, Object&gt;) appsList.get("credentials");
}

public Map&lt;String, String&gt; getUserData(String url, String org, String space, String app)
        throws MalformedURLException {

    Map&lt;String, Object&gt; credentials = getCredentials(url, org, space, app);

    Map&lt;String, String&gt; parameters = new HashMap&lt;&gt;();
    parameters.put(ID, credentials.get(ID).toString());
    parameters.put(DEFAULTS, credentials.get(DEFAULTS).toString());

    return parameters;
}


Your original method was mostly getting the credentials.  If we move that into another method, it actually leaves this method rather simple and straightforward.  

I moved what had been ops into the mapSystemProvided chain, as it wasn't used for anything else.  

As a general rule, it is easier to have interfaces as types rather than implementations.  In this case, it makes the lines fit in the code window without scrolling on my screen.  That may not matter in your IDE though.  Mostly I just find it a good habit.  Most all of the time, you're just using the interface methods anyway.  Using the interface as the type helps enforce that and allows you to switch implementations easily.  Even if it doesn't actually work that way here.  

I think that you could change the casts to the interface as well.  I didn't try that here, as I don't work with casting enough to be sure.  And of course there isn't enough context here to actually test this code.  But if I was working on this code, I'd try that to decouple it even more from the implementations.  

I'd probably change SERVICES to services as I changed Url to url.  That way they fit the standard Java naming scheme.  

I would consider changing the entity model.  For example, why is credentials hidden multiple levels deep inside of the getSystemProvided() result?  Maybe there's a reason for that, but it's hard to see with just this code.  It seems overly abstracted, at least when viewed in isolation like this.  

Your indentation is funky.  I fixed it to be consistent in the alternative versions.  Perhaps that was just a copy &amp; paste error.  There was also a missing } that I added.