The Ping Identity Directory Server offers a retain identity request control that allows you to process a bind without changing the connection’s authentication/authorization identity. It’s very useful for applications that need to process a mix of bind and non-bind operations. I wrote about it on my personal blog.