shouldn't the second parameter here be SamlConstants.PURPOSE_ROLE_ATTR?