3.2.x and Earlier Login Switching

[Klingenstein, Nate]

> I assume this is what you were referring to as
> part of the game playing with Principals, and a piece I can short-circuit with
> the assumptions I'm applying.

Er, separate from principals.  Let me try again.

I assume this username canonicalization is something I can brute force with the assumption that the results of the Password flow will have the Username that I want to do validation with against Duo.

e.g. hardwiring

usernamePasswordContext.getUsername() into place instead of any legitimate strategy.

Is that horribly wrong, and does it work on return visits, e.g. step-up?