Special characters from SAML attribute statement are not well encoded
SAML attributes are not automatically encoded in UTF-8. We should maybe check this before register them into session.
This can be tested by using AuthSAML with an IDP sending attributes values containing accents