Stop calling SimpleSAML_Session::getAttributes() in SimpleSAML_Error_Error class. Use an alternate way to try to fetch user's mail.

Remove error handling code when session fails to initialise in SimpleSAML_Session::getSessionFromRequest().

Remove DATA_TIMEOUT_LOGOUT and expireDataLogout() from SimpleSAML_Session. Now, if we want to store data in the session that needs to go away when logging out, we should do that manually on every logout.

Manually remove logout callbacks data from the session on the SP (instead of using SimpleSAML_Session::DATA_TIMEOUT_LOGOUT).

Manually remove idp-ssotime data from the session on the IdP, per association (instead of using SimpleSAML_Session::DATA_TIMEOUT_LOGOUT).

Add $authority parameter to initLogoutReturn which was previously removed instead of making it mandatory.

Make auth source mandatory as a parameter to SimpleSAML_Auth_Default::initLogoutReturn() and initLogout().