Best practice MFA IdP3.3.1

[Cantor, Scott]

> OK I'll go with your other suggestion.  If I use a BaseContext subclass
> implementation and add it to the tree, I should be able to avoid persisting
> anything from that context in the session, and keep it request-scoped.  For
> that, would I just add it to the PRC?  (Last question... honest!)

You can add it pretty much anywhere you want within reason, but directly under is the simplest way and is certainly guaranteed to be inviolate for the life of the request.

-- Scott