Question on response status codes on auth failure

[Cantor, Scott]

> Of course, except for the two conditions that I have no control over.
> 
> 1) The user hit the ³cancel button²
> 2) The user enters wrong credentials/PIN/password or user does not exisit.

As Peter said, the latter is not handled that way. The former isn't something the form does by default, but that's not inconceivable.

> It is only these conditions that are of any interest and the SP wants to
> be able to detect that this happened. To display appropriate information
> to the user.

There's no SAML status code for "canceled", so no standard way to signal that.
 
-- Scott