That's right, I'm trying to log this at the IDP, not at the SP. In general, it can't come from the IdP. In normal cases, failure often doesn't ever come back to the IdP and it never finishes anything, just stops. See discussion in the bug Marvin filed on this today, it's equally true in V2.