little extra error handling in SamlAuthenticationStrategy