diff --git a/service_provider.go b/service_provider.go index c5e15c1a..14f2a114 100644 --- a/service_provider.go +++ b/service_provider.go @@ -1547,7 +1547,7 @@ func (sp *ServiceProvider) ValidateLogoutResponseRedirect(query url.Values) erro } if err := sp.validateSignature(doc.Root()); err != nil { - if err != errSignatureElementNotPresent && !hasValidSignature { + if err != errSignatureElementNotPresent || !hasValidSignature { retErr.PrivateErr = err return retErr }