reuse of MFA flow result for SSO

[Cantor, Scott]

> Ooooooh, that sounds perfect, and way easier than the twiddling around
> with the 3.3 config mechanisms. Any ETA on a 3.4 release :)?

Not a long time but not that soon.

> Would it be particularly difficult to backport that feature to 3.3? I would hate
> to spend a lot of time duct taping together a huge kludge when such a nice
> clean solution is on the horizon.

It's not a huge patch, but it's changes to the actual source code, I guess it depends whether you want to build it yourself and add a patch. There's a Predicate field on the AuthenticationFlowDescriptor, that change is simple, but then there's a patch to some of the behavioral code that actually decides what to do. I don't know if the patch is self contained or has any complications. I can dig out the commit if that's what you want to try to do.

-- Scott