Best practice MFA IdP3.3.1

[Jim Fox]

>
> I know how to walk from a flow context up into the servlet request. I don't know how easy it is to go the other way (it's easy to inject shibboleth.HttpServletRequest as a custom object ref, but I don't know how to get from there to flow gunk). That's basically why I don't advocate using flow variables.
>

I use conversationScope as variable storage and it seems to work pretty well.  As long as I can get the SpringRequestContext I can access the conversation scope.  I haven't tried it in the attribute resolver, but it seems like the SpringRequestContext would be available somewhere.

Jim