Unicon/cas-mfa — pull request #2 by mmoayyed (2013-05-29 18:33:42+00:00)
Title: Subflow branching based on LOA

# Summary
This pull presents the basic scaffolding required for subflow branching based on the loa parameter. It also presents the appropriate UI for the second-factor authentication and is able to construct the CAS workflow in absence or presence of the loa parameter.

In case the loa parameter is specified,
* The first authentication screen requires a match between username/password
* The second authentication screen requires the hardcoded `casuser/Mellon` credentials. This is just to demonstrate that authentication mechanisms are different and is done to economically take advantage of the same login screen and Spring webflow action for form authentication.

The UI presents some useful data notably authenticated netid and the loa level and the configuration demonstrates how model objects can be transferred from flows to subflows back and forth. The second level of authentication, although it currently presrents yet another form, can easily be tweaked to require other forms of credentials, such as OTPT.

The configuration model easily allows for extending the authentication workflow to many other additional authentication factors and levels if/when required.

# TODO
What needs to be done still, is the detection of an existing SSO session and enforcing MFA based on the existence of loa parameter.