code: private static boolean validateCallbackInformation(Hashtable<String, Object> credData, String securityName, Invocation isInvoked) {
          boolean status = true;
          if (isInvoked == Invocation.CALLERPRINCIPALCALLBACK) {
              String existingName = (String) credData.get(AttributeNameConstants.WSCREDENTIAL_SECURITYNAME);
              if (existingName != null && !(existingName.equals(securityName))) {
                  status = false;
                  Tr.error(tc, "CALLBACK_SECURITY_NAME_MISMATCH_J2CA0675", new Object[] { securityName, existingName });
              }
          }
          return status;
      }
docs: This method validates whether the user security name provided by the CallerPrincipalCallback and
  the PasswordValidationCallback match. It does this check only in case the CallerPrincipalCallback
  was invoked prior to the current invocation of the PasswordValidationCallback.
  
  @param credData The custom hashtable that will be used for login
  @param securityName The user security name provided by the callback
  @param isInvoked An Enum that represents whether either the CallerPrincipalCallback was invoked prior to this invocation.
  @return boolean indicating whether the validation succeeded or failed