Flag to identify if user selected SSO or not

[Cantor, Scott]

> I didn't see anything that allowed this in the SAML packet but was wondering
> if I'm missing something. I thought of using a variable but I'm not sure if I can
> set a variable based on the login process.

A SAML attribute would be the most likely way it could be done. The PreviousSession authentication context was something that was basically not thought through and got left in the spec even though it's essentially impossible to use.

-- Scott