> In case exceptions are thrown out of, say, data connectors, or attribute scripts, is the idP supposed to display an error page or is the error supposed to be forwarded to the SP via the SAML response? For v3, see https://wiki.shibboleth.net/confluence/display/IDP30/ErrorHandlingConfiguration