SASL is a framework that lets application protocols plug in authentication mechanisms.

SMTP exposes SASL through the AUTH extension. IMAP and other protocols also use SASL mechanisms.

A mechanism name alone does not tell you the complete security posture. Consider whether the connection is protected by TLS, whether credentials are replayable, and how the identity system manages the account or token.

Reference material