Enterprise Server for .NET uses a logon provider to validate user credentials (user ID and password) for APIs such as EXEC CICS SIGNON. With user impersonation enabled, the logon provider also supplies the token used to impersonate the user.