1. A method for authenticating users in a secure search system, comprising: providing a framework operable to accept user identification information in an arbitrary format; receiving user identification information from a user requesting access to a secure data source; validating the user against an identity management system for the secure data source; and if the user is validated, calling back into the identity management system for the secure data source to obtain access information for the user.