distinguish between new authentication and existing auth

[Carlos.Fernandez at usitc.gov]

I am sorry if this is has been asked and answered a few times on the
board already.  SSO/CAS terminology is a little new to me.

When a web application validates a ticket with CAS, is it possible to
determine if this ticket was generated from a new primary authentication
(e.g. user just interacted with the CAS server login form) or the result
of an existing SSO authentication (e.g. user logged in 30 minutes ago
with CAS)?

I only know enough about spring webFlow to be dangerous, but I can see
how I can step into a few of these places to determine if a successful
login submission has occurred or if CAS is relying on a prior ticket.
But that seems painful.

Carlos