WebAuthn: Issue with Fido metadata?

[Cantor, Scott]

> I do not think your activation condition will work because the
> actual authentication flow is authn/MFA. So it is that
> activation condition the IdP will check and not the password
> flow condition.

Actually the MFA flow doesn't check a flow's activation condition when it runs login flows because you're the one telling it to run them. There are some things it checks/enforces, but not that.

The decision logic governing when/whether to run Password is up to your MFA flow logic entirely.

-- Scott