Allowing user to select authn flow

[Cantor, Scott]

I did a how to about something that's quite different in purpose but includes a lot of the relevant concepts:

https://shibboleth.atlassian.net/wiki/spaces/KB/pages/3132850178/Precollection+of+Username+During+Authentication

You can't do views inside the MFA logic itself, you need a custom flow for that.

One basic problem, and one reason that example may be relevant is that you may not have considered that you can't base this on the user's identity (e.g. a group lookup) until they've identified themselves.

-- Scott