Selecting DuoOIDC 'config' based on user attribute in LDAP

[Cantor, Scott]

Both old and new Duo flows have always had support for this, and certainly not be "cloning" anything. You build a strategy function for deriving the configuration to use, and there are bean names reserved for that. There are examples in the documentation.

As far as using an attribute to derive it, look at the examples in the MFA documentation around scripting that, the same approach would apply here.

-- Scott