Scripted AuthnContextClass/AuthenticationPrincipalWeightMap

[Cantor, Scott]

I guess if your actual goal here is "don't require MFA but pick a different context for it if it's used", then that would be addressed by setting defaultAuthenticationMethods to both the "special" value and something else like Password or PPT, and that can allow the IdP to bypass MFA if it's not required.

A lot of this is very site-specific in terms of how MFA is being applied and when, but suffice to say the weight map is not your answer here.

-- Scott