Distinguishing SSO from login with initial auth (3.2.1)

[Cantor, Scott]

> Is there another way that e.g. an Action running within the standard
> auth-flow could identify whether an auth result is due to "real" SSO
> from the initial flow, or a password auth from the initial flow?

Nothing but timestamps probably.

> I expect this to be easier in 3.3 when we're able to ditch the initial
> auth construct...

There's an API for this, and there're already success/failure counters.

-- Scott