IDP 3.3 MFA flow -- working example

[Cantor, Scott]

> idp.properties (typical install changes for entityID and scope plus…)
> modified property to idp.authn.flows = Password|Duo|MFA

No, you enable MFA, that's it. You cannot enable all of them, and it's pretty much going to break if you do, or even worse. If the SP doesn't request anything special, that basically guarantees, depending on declaration order of the beans, that the Password flow alone will run and return, which is what it's doing I imagine.

-- Scott