If you make an AuthnRequest with isPassive flag set to true and get NoPassive response, by default you get the following excepetion "opensaml::FatalProfileException". Hiding passive authentication failure would be good since the NoPassive response is not a failure, but rather a normal response that is a part of the passive authentication flow.