Logic for mfa-authn-config.xml

[Cantor, Scott]

> Here, do you mean in the MFA selection logic, or by overriding the desired
> authentication context for the entity-id?

The latter.

> Well, obvious to <expert developer with insane amounts of knowledge>
> compared to <mostly end-user who occasionally pokes at code or needs a
> more complex than usual configuration> aren't quite the same ;). Thanks for
> the input, and sorry if I'm asking silly questions :).

Yes, but there's an example of using an attribute trigger in the default distribution.

My point was that you seemed to be focused on how to distinguish between the different kinds of services, and that's pretty much brute force unless you planned on encoding it in a database or something and then I suppose you could do some kind of lookup of the service as well as the user.

-- Scott