A CAS module that allows a principal to authenticate as another