intercept flow detect first authentication

[Scott Koranda]

> > Logging showed that the authentication result was always
> > contained in the active results whether it was a
> > first-authentication flow or a SSO flow later.
> 
> Hmm, that's not what I would expect, I don't know how it
> would get there. Unless you're messing with that
> initial-authn mess, which will cause me to begin retching.

Oh dear.

Yes, I forgot myself. This deployment has idp.authn.flows.initial defined.

So could I simply call getInitialAuthenticationResult() on the
authentication context and if a result is returned I know this
is not SSO?

Sorry for the retching.

Scott K