Local SSO integration with IdP 5.1.1

[Cantor, Scott]

> I don't know if this helps, but this is how my IdP checks (after removing extra fluff for this
> email) for a proxy session in the MFA flow during our "checkFirstFactor" script 

That won't fly here because there's no result to look for, the other method failed. The problem is the failure modes across the methods are similar and overlap (and more that the Password flow happens to be the only one with real error handling in it).

It literally needs a "this is the first time displaying" signal, which I could probably build in (with the same sort of hack I mentioned initially).

-- Scott

PS. The active flow collections are maps, so you could simply do containsKey on the map, you don't need to loop.