User-Defined Post Authentication Flows

[Cantor, Scott]

> The authentication method is not static but a function of the data in the
> AttributeContext. I don't know whether that's right or wrong, but those are
> the requirements. I don't see any other way to accomplish it than via an
> intercept flow that fiddles with the authenticated subject under certain
> conditions.

While there's quite a bit of dynamic manipulation of the Subject possible, the "final" answer to that will definitely be the MFA flow to make those kinds of changes outside of the existing login flows.

-- Scott