Flag to identify if user selected SSO or not

[Cantor, Scott]

> ​I thought of that but it doesn't help if it's the first SSO "thing" logged into.
> Unless I'm missing something here.​

No, I sort of forgot what you were trying to do, I was thinking about it from the point of view of what Scott was doing. You're right, that's not really the same thing.

I guess there's a clear answer: I don't know how you're convincing it not to do SSO. If I knew that, I might have a better idea.

The supported way of not doing SSO is to include a predicate that's attached to the authentication flow descriptor that controls seralization. It lets you tell it not to store the result of the flow for reuse later. If you were doing that, then the basic answer would probably be to apply that same logic in the attribute resolver.

-- Scott