IDPv3.3 and programmatically selecting MFA based on attribute

[Cantor, Scott]

>> 	duoValue = "urn:tufts.edu:ac:classes:PasswordProtectedTransport:duo"
>>
>> 	That value is, FWIW, not valid. You can't make up URNs like that.
>>
>> 
> They could if they got I2 to delegate the space urn:mace:tufts.edu
> in parallel to urn:mace:umbc.edu couldn't they?

Yes, but then it still wouldn't be that value. "urn:tufts.edu" is not a valid URN namespace.

Nor in any event would I ever create a value that references passwords or Duo. We have learned that lesson; context classes should never refer to technologies. That is a dead end.

-- Scott