Recommendations for an access management tool/service to compliment CAS

[David Harrison]

Hi,
I am new to CAS but what I have seen has impressed.

Does anyone know of complimentary services to CAS which provide 
identity/access information from a centralised source in a similar 
manner as CAS handles authentication?
The ideal from my perspective is something that works with CAS proxy 
authentication so that user identity/access information is only 
available to the host application when the user has an active CAS 
session for reasons of privacy.

I understand if there isn't such a service but I thought I would ask 
before reinventing the wheel.

Regards,


David Harrison