Minor Description
When building LDAP authentication blocks, provide for a way in the Admin console to specify the credential criteria field. This value as a text field could be regular expression, or a class that implements Predicate which forces the underlying authentication handlers to be filtered based on format of the user id.
For example, a criteria would be ".+@tirasa.net", which would tell the handler to operate and verify the user, if their username matches that pattern.
This would eventually be mapped to CAS via:
LdapAuthenticationProperties#setCredentialCriteria