Use group for MFA

[Richard Frovarp]

I'm trying to figure out how to trigger MFA in Shib 3.3 using the built 
in Duo integration based off of group membership in AD.

I have figured out how to get the MFA workflow to work, and how to write 
the most simplistic code to either just go with password or to push on 
with Duo. What I haven't figured out how to do is get user attributes. 
I'm resolving attributes out of AD, and I'm hoping that takes place 
after password, and is somehow available at the MFA checkSecondFactor 
spot. Is it in the SubjectContext, and is that available via the 
getSubcontext() calls? Is there something else I need to be looking at? 
 From the javadocs, it isn't entirely clear as to what I should be 
looking at.

Thanks,

Richard