auth flow according to attribute value