APM Logout page redirect

I came across something similar recently. The AD auth agent doesn't function the way you might think it does, and it won't generally allow you bounce back to the logon page after a set number of tries, or fail to another AD auth agent for that matter. The way we handled it was by first querying the directories (AD or LDAP query) for the user, and then performing the AD auth based on the known AD domain. You might alternately try to invalidate the APM session and then issue the redirect, but I'm not 100% certain that'll work either.