...
The conf/authn/mfa-authn-config.xml must contain define the transition maps that control the flow from one factor to another. The following example defines password as the first factor followed by U2f if U2f if the service provider requests demands it using the authentication content class context of https://refeds.org/profile/mfa:
...