Improve exceptions for saml2 providers