Framework for authentication and data security in Internet Protocols that decouples authentication mechanisms from application protocols.
In theory this allows any authentication mechanism supported by SASL to be used in any application protocol that uses SASL.
Authentication mechanisms can also support proxy authorisation, a facility allowing one user to assume the identity of another.