IDPv3.3 and programmatically selecting MFA based on attribute

[Cantor, Scott]

> I also went ahead and updated the Wiki example on
> https://wiki.shibboleth.net/confluence/display/IDP30/MultiFactorAuthnCon
> figuration under "Programmatically Selecting Flows" to use this lookup
> method instead of the previous SubjectCanonicalizationContext method to
> hopefully save someone else in the future.

If that's my example and is what I shipped, that's my fault, all that work probably hadn't been tested in the context of running the logic every time rather than just when the first factor runs.

-- Scott