diff --git a/ssoauth/templates/403.html b/ssoauth/templates/403.html
new file mode 100644
index 0000000000000000000000000000000000000000..2c38c4e3bb1e59a29cf5f8ef0a16d25c7595c45f
--- /dev/null
+++ b/ssoauth/templates/403.html
@@ -0,0 +1,14 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+ <meta charset="UTF-8">
+ <title>403</title>
+</head>
+<body>
+<h1>403 Forbidden</h1>
+<p>
+ You (<code><strong>{{ request.user }}</strong></code>) don't have permissions to access this page.
+</p>
+{% if not request.user.is_anonymous %}<p><a href="{% url "sso-logout" %}">Log Out</a></p>{% endif %}
+</body>
+</html>
diff --git a/ssoauth/views.py b/ssoauth/views.py
index 91904f19e57506796bb046ae6bf224b3108ea223..b9dc9e2c03a4a4353cb60e75580c13e0191efe20 100644
--- a/ssoauth/views.py
+++ b/ssoauth/views.py
@@ -104,7 +104,7 @@ class LoggedOutLocallyView(TemplateView):
def get_context_data(self, **kwargs):
context = super().get_context_data(**kwargs)
- context["IDP_LOGOUT_URL"] = app_settings.IDP_LOGOUT_URL
+ context["IDP_LOGOUT_URL"] = app_settings.IDP_LOGOUT_URL or "#"
context["THIS_SITE"] = get_current_site(self.request)
return context