Use group for MFA

[Cantor, Scott]

> Is this the general recommended way to use an attribute as a means of
> making a user use Duo? I'm looking into doing something similar and want
> to make sure.

The recommended hooks are mostly the example that's checked into trunk/master now, and I believe is also in the wiki, which has a fix or two from what was shipped last time. It definitely shows the correct way to get the username for the attribute lookup, and what you quoted does not.

-- Scott