The SPI-level User Handler already exposes a method to retrieve users by their login. This would be a useful addition to the public API layer.