Looks like it may be easiest to make a custom Catalyst::Authentication::Credential module like Catalyst::Authentication::Credential::MyApp and on the quick look it appears you need to make an 'authenticate' method which returns a user object.