SAML: injection of multiple attributes