using the nextFlowStrategyMap (3.3)

[Jim Fox]

>> Possibly it was obvious from the documentation, but I didn't realize until
>> trying it that you can put a map in any transition, not just one specially built
>> for such a map.
>
> Having trouble parsing that, but you can mix/match the various types of transition rules if that's what you mean. They're just progressively simpler shortcuts as you go from the full syntax to the simplest one.
>

I didn't express it well.  As an example, I can catch Duo login failure 
and prompt for some other 2nd factor:

      <entry key="authn/Duo">
          <bean parent="shibboleth.authn.MFA.Transition">
            <property name="nextFlowStrategyMap">
              <map>
                  <entry key="ReselectFlow" value="authn/entrust-authn" />
                  <entry key="NoCredentials" value="authn/entrust-authn" />
                  <entry key="*" value="" />
              </map>
            </property>
          </bean>
      </entry>


Jim