prefer the last value from SAML attribute if possible