Should I use a credential provider in this case?

Hi!

I have been assigned to rewrite functionality formerly implemented as a GINA
on XP and 2k. My customer wants to capture the credentials entered by the
user, connect a VPN service, and then let winlogon continue to logon when
the VPN connection is established. The windows credentials may be used in
the VPN connection setup and do therefore need to be captured before setting
up the VPN connections. To furter complicate matters, depending on the
authentication method setup on the server I may have to display additional
dialogs to get more credentials as well.

From what I have read it seems like what I try to accomplish is,
functionalitywise, somewhere between a credential provider and a pre-logon
access provider (PLAP).

Any input on how to move forward would be very appreciated.

Many thanks,
Fredrik Jansson