Pluggable Authentication

In support of customers wanting to employ an external user verification system - such as LDAP or ticket granting service, for example - the mechanism to pass user verification out to another service is enabled via a plugin accessed on the Capital Manager server. Once the plugin has been created - either in Java or JavaScript - it can access the Capital framework via the extensibility API, allowing two-way communication between the plugin and the Capital applications.

See the CustomSecurityPluginDevelopment.pdfdocument in the doc/plugin folder of your Capital installation for information on creating and deploying a plugin to allow communication with an external authentication service.

Once the plugin has been placed in the correct location on the Capital Manager server machine, check it has been loaded and refresh the installed plugins list if necessary. Open Capital Project Manager on the server machine and select Actions > Plugins from the menu. If the authentication plugin is not displayed in the Available Plugins list, click the Reload All button to refresh the list. Once you have verified that the plugin is present, close the dialog.

Although the external system control access to the Capital applications, user permissions are still maintained in Capital Access Manager and applied throughout the Capital tools, meaning that a complete list of users, along with their assigned Domains, Roles and Permissions, must exist within Capital Access Manager. This list can be populated by exporting the user list from your authentication system, then importing it into Capital Access Manager. Once the users have been imported, permissions can be assigned. See Importing User Data for more information.

Parent Topic:

External User Management Systems

Capital Access Manager User Guide, 2512.2606

Unpublished work. © 2026 Siemens