fixed: checking for the SAML attribute fails