MFA Once per Session Action FAQ example seems incomplete

[barry.may]

I’ve read this recent FAQ post about using the mfa once per session process as an action

MFA Once Per Session Action

Problem statement How can we write an MFA Once Per Session Action? Solution /* triggers MFA once per session */ exports.onExecutePostLogin = async (event, api) => { if (!event.authentication.methods.find(({ name }) => name === 'mfa') ) { api.multifactor.enable("any", { allowRememberBrowser: true }); } }; The above can be used to avoid prompting a user for multifactor authentication if they have successfully completed MFA in their current session. This is particularly useful when …

But while this technically works, this feels incomplete when compared to the original Rules-based implemention, which checked for a mfa confirmation, and had the user proceed… Setting the 30 day MFA flag automatically doesn’t give the end-user the ability to see their MFA confirmation on logout.

Can an implementation that’s equivalent to the rules “Require MFA once per session” implementation be provided?

Thanks!