@Override
    protected Event doExecuteInternal(final RequestContext requestContext) throws Throwable {
        val user = PasswordlessWebflowUtils.getPasswordlessAuthenticationAccount(requestContext, PasswordlessUserAccount.class);
        if (user == null) {
            LOGGER.error("Unable to locate passwordless account in the flow");
            return error();
        }

        val clients = providerConfigurationProducer.produce(requestContext);
        if (clients.isEmpty()) {
            LOGGER.debug("No delegated authentication providers are available or defined");
            return success();
        }
        if (!isDelegatedAuthenticationActiveFor(requestContext, user)) {
            LOGGER.debug("User [{}] is not activated to use CAS delegated authentication to external identity providers. "
                + "You may wish to re-examine your CAS configuration to enable and allow for delegated authentication to be "
                + "combined with passwordless authentication", user);
            DelegationWebflowUtils.putDelegatedAuthenticationDisabled(requestContext, true);
            return success();
        }
        DelegationWebflowUtils.putDelegatedAuthenticationDisabled(requestContext, false);

        val providerResult = determineDelegatedAuthenticationProvider(requestContext, user, clients);
        if (providerResult.isPresent()) {
            val clientConfig = providerResult.get();
            DelegationWebflowUtils.putDelegatedAuthenticationProviderPrimary(requestContext, clientConfig);
            val request = WebUtils.getHttpServletRequestFromExternalWebflowContext(requestContext);
            request.setAttribute(Pac4jConstants.DEFAULT_CLIENT_NAME_PARAMETER, clientConfig.getName());
            return eventFactory.event(this, CasWebflowConstants.TRANSITION_ID_PROMPT);
        }
        LOGGER.trace("Delegated identity provider could not be determined for [{}] based on [{}]", user, clients);
        return success();
    }
This is {@link PasswordlessDetermineDelegatedAuthenticationAction}.

@author Misagh Moayyed
@since 6.2.0
support/cas-server-support-passwordless-webflow/src/main/java/org/apereo/cas/web/flow/delegation/PasswordlessDetermineDelegatedAuthenticationAction.java