Post-authentication actions

[Carl F. Hall]

Is there a plug point for performing actions post authentication?  My scenario 
is that we'll have a CAS authentication handler that after a user passes 
through successfully we'll need to get the user's information (profile type 
stuff) from the enterprise directory that doesn't live in JCR.  Some circles 
call this user provisioning after authentication.  Thoughts?