The Security Infrastructure JAAS stack provides the SagCredentials class. Security Infrastructure login modules support only this type of credentials. SagCredentials are queried by SagCallbackHandler, which is the default callback handler for credentials. It supports SagCredentialCallback. Upon successful authentication, the SagCredentials can be stored as private credentials in the Subject, from which they can be retrieved by the application. Following is a list of user's attributes that SagCredentials sets and retrieves.