OIDC protected page (initiates SSO sequence without ACR requirements, if no existing session)


OIDC SSO sequence with request to essential claim acr=https://refeds.org/profile/mfa


OIDC SSO sequence with request to max_age=0 and essential claim acr=https://refeds.org/profile/mfa