SAML: Authentication crashes if invalid role is specified in assertion

SAML assertion validation doesn't validate roles that come in SAML attributes good enough.
It currently only checks that roles can be parsed (role syntax is ok), but doesn't check the semantics. For example, it doesn't check if roles have all required parameters.
This can lead to SAML authentication crash when those incorrect roles are used.