Use AttributePredicate in MFA-config

[Cantor, Scott]

> Before I evaluate the compound predicate, I already create the
> AttributeResolverContext for the current user (known from the first
> factor) and resolve an attribute. Doesn't this set the AttributeContext?

No, the helper method I provided just populates the results in the AttributeResolutionContext, it doesn't perform the same functions that the full attribute resolution logic in the IdP performs. The predicate code you're trying to use doesn't support anything but a populated AttributeContext, so you'd have to manually create one or build your own logic.

(You also failed to remove the AttributeResolutionContext afterward whch will cause a lot of other problems later.)

-- Scott