Local SSO integration with IdP 5.1.1

[Cantor, Scott]

Maybe I'm missing something, but isn't this a pretty straightforward use case for the External login method?

> (1a) Build a brand new authn flow and invoke it from our MFA script
> near the top. Advantage: probably no more need to mess with impl
> classes.

That's a necessity, not an advantage. You should *never* modify our flows, even if that works, it will destroy your ability to upgrade eventually. No convenience is worth that risk, it's just not even an option you should consider.

Copying impl classes is bad, but modifying flows is much worse.

I don't see why you'd need a whole new flow, External will punt out to your own code for this without any special effort other than implementing the part you'd already have implemented.

-- Scott