protected void validateDestinationEndpoint(final StatusResponseType logoutResponse, final SAML2MessageContext context) {
        List<String> expected = new ArrayList<>();
        if (StringUtils.isBlank(this.expectedDestination)) {
            val endpoint = Objects.requireNonNull(context.getSPSSODescriptor().getSingleLogoutServices().get(0));
            if (endpoint.getLocation() != null) {
                expected.add(endpoint.getLocation());
            }
            if (endpoint.getResponseLocation() != null) {
                expected.add(endpoint.getResponseLocation());
            }
        } else {
            expected.add(this.expectedDestination);
        }

        val isDestinationMandatory = context.getSaml2Configuration().isResponseDestinationAttributeMandatory();
        verifyEndpoint(expected, logoutResponse.getDestination(), isDestinationMandatory);
    }
<p>validateDestinationEndpoint.</p>

@param logoutResponse a {@link LogoutResponse} object
@param context a {@link SAML2MessageContext} object
pac4j-saml/src/main/java/org/pac4j/saml/logout/impl/SAML2LogoutValidator.java