APM Selection of Authentication Methods

It really just boils down to HOW to attribute a particular authentication type to a specific user, so you have to have this information somewhere. If you could add an entry to one of your directory services for all of the users and then indicate appropriate auth method there, then you could query that first and then do the auth. You could also technically try all of the auth methods in order until one of them worked. It'd produce a lot of "failed" log messages, but it's an option nonetheless.