Relying Party User-Agent Predicate

[Klingenstein, Nate]

> I'm not sure how "Relying Party" translates to "different authentication mechanisms". That isn't really the best way to choose how to login, I would put the check on the AuthenticationFlowDescriptor bean in an activation condition, probably.

Thanks so much for the feedback.  I don't think I can get away with the above approach since I need to be able to honor MFA in either case, right?  The check is going to have to happen within the MFA logic, and I'm still wrestling with that.