Pair would be perfectly suitable, but we would need to move it to a top-level class. It's presently an inner class of AbstractAuthenticationManager, so making a new class is less disruptive to other unrelated parts of the codebase. I suppose we could create org.jasig.cas.Pair and rework AbstractAuthenticationManager subsequently.