Multiple DuoOIDC -- Integration-Specific Principal Sets

[Cantor, Scott]

> The issue we are having now is that we would like to only
> enforce our special duo integration on a select group of users
> who are defined in our directory. 

That complicates things significantly.

It takes scripting in the MFA flow to control what runs for what users, and only assuming you already know who the user is, i.e., based on the result of a first factor running.

There's a simple example under "Programmatically Selecting Flows" in the documentation.

-- Scott