Legacy sign-in

Also written: legacy sign-in protocols, legacy_sign_in

Old sign-in protocols that can't ask for MFA, so attackers can use them to skip MFA altogether. Alex turns it off in Kettle & Crane's IdP.

Where the book teaches it