Real Life Example - IMAP Channel

A User Authenticates to uPortal via CAS

The uPortal validates the user and requests a PGT

(later) The user activates an IMAP Mail Channel

The uPortal uses the PGT to request a PT.

The IMAP Channel passes the PT to the IMAP server as the user's security credentials.

The IMAP server hands the PT to a custom PAM module that validates the PT with CAS and determines both the user's identity and the host serving as proxy for this user.