protected Optional<DelegatedClientIdentityProviderConfiguration> determineDelegatedAuthenticationProvider(
        final RequestContext requestContext, final PasswordlessUserAccount user,
        final Set<? extends DelegatedClientIdentityProviderConfiguration> clients)
        throws Throwable {
        if (user.getAllowedDelegatedClients() != null && user.getAllowedDelegatedClients().size() == 1) {
            val clientName = user.getAllowedDelegatedClients().getFirst();
            return clients
                .stream()
                .filter(client -> client.getName().equalsIgnoreCase(clientName))
                .findFirst()
                .map(DelegatedClientIdentityProviderConfiguration.class::cast);
        }
        return determineDelegatedIdentityProviderConfiguration(requestContext, user, clients);
    }
This is {@link PasswordlessDetermineDelegatedAuthenticationAction}.

@author Misagh Moayyed
@since 6.2.0
support/cas-server-support-passwordless-webflow/src/main/java/org/apereo/cas/web/flow/delegation/PasswordlessDetermineDelegatedAuthenticationAction.java