> I get that when initiating from Application Y, there is no session left of the IdP > to invalidate --- however, is there any way I can change messaging above > (rather than have users calling saying error occured)? Unless there's a bug there isn't any reason I know of that the standard documented error handling features can't be used. -- Scott