Its not currently ;-) Currently, we don't pass the error message on beyond the AuthenticatorService. I put it in there for the future, depending on whether we want to go with generic logout for 400 or the other way around.