One of the objectives here is to abstract all meaningful data that could be produced by an AuthenticationHandler for use by dowstream components. SearchResult is specific to LDAP, which violates that design principle. That said, I believe we can accommodate your use case since if an AuthenticationHandler retrieves attributes, they will be bound to the resolved Principal in the returned HandlerResult and will be available to downstream components as an attribute map on the principal.