Make instantiation of saml.User easier. Most of the parameters of the constructor can be taken from the Assertion object, so there's no reason to pass them separately. Also, trying to check the validity dates isn't useful for the single sign on case. See comments in the hasExpired method.

SYMBOLSET
SYMBOL
  NAME 'point'
  TYPE ELLIPSE
  POINTS
    1 1
  END
  FILLED TRUE
END
SYMBOL
  NAME "square"
  TYPE VECTOR
  POINTS
    0 0
    0 1
    1 1
    1 0
    0 0
  END
  FILLED TRUE
END
END