MFA and OIDC RP canceling

[Cantor, Scott]

You'd have to be able to map a status value returned in the standard way OIDC defines and map that to an event string, and then you could key off the event in the usual manner.

I don't know how the RP plugin exposes status values from the OP or if they're mappable, but all the login flows inherit from the authn-events flow that's in the flows/ folder, and that allows you to add events and transitions to allow for custom events to be signalled by a login flow.

So the trick is really what the RP can do in terms of mapping statuses to events to signal out, the rest is relatively built-in.

-- Scott