PicketLink does not include Destination URI for an AuthnFailed Response. This is an optional attribute but is required under PostBinding as per the SAML Spec.