Selecting Duo integration during MFA script

[Christopher Bongaarts]

On 10/8/2024 4:29 PM, Cantor, Scott wrote:
>> A good suggestion, but there is a Duo API call that needs to
>> happen in the MFA script to decide whether to invoke the
>> Duo auth in the first place that I would prefer not to have to
>> duplicate within the integration strategy. . .
> Stashing something is fine, the ScratchContext class is the most advisable place/way to do that. We don't use it (I think that's basically a hard and fast rule we have, but I'll review) so anything you do with it should be entirely private.
ScratchContext is what I ended up using (once I realized there was 
nowhere to put more stuff in AuthenticationContext itself), and it seems 
to work fine.  Only reference I could see is that Logout can be told to 
put stuff there if you ask it to, so I don't think it will clash with my 
stuff.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%