Here is my take on a standalone SamlFormAuthenticate to login/logout using both Form users and SAML users. See note and comments