code: protected void validateLogoutResponse(final LogoutResponse logoutResponse, final SAML2MessageContext context,
                                                 final SignatureTrustEngine engine) {
  
          validateSuccess(logoutResponse.getStatus());
  
          validateSignatureIfItExists(logoutResponse.getSignature(), context, engine);
  
          validateIssueInstant(logoutResponse.getIssueInstant());
  
          validateIssuerIfItExists(logoutResponse.getIssuer(), context);
  
          verifyEndpoint(context.getSPSSODescriptor().getSingleLogoutServices().get(0), logoutResponse.getDestination());
      }
docs: Validates the SAML logout response.
  
  @param logoutResponse the logout response
  @param context the context
  @param engine the signature engine