public function validateNameId(LogoutRequest $request, User $user)
    {
        if ($request->getNameID()->getValue() != $user->getUserName()) {
            throw new SamlException('urn:oasis:names:tc:SAML:2.0:status:RequestDenied');
        }
    }