IDP 3.3 MFA flow -- checking to see if an authn context class ref was requested

[Cantor, Scott]

> Could you please give an example of how to check for a user attribute?
> I've been banging my head againt that.

The MFA flow as shipped is configured with an example script that resolves an attribute and uses it to decide on a transition. The same code could be applied to almost any script anywhere in the system to do the same thing, provided there's a user identity.

-- Scott