in src/main/java/org/apache/sling/auth/saml2/sp/SessionStorage.java [71:76]
public void clear(HttpServletRequest request) {
HttpSession session = request.getSession(false);
if (session != null) {
session.removeAttribute(sessionAttributeName);
}
}