# External modules

Documentation owner: product `control`; documentation version: `1.3.0`.
Source: `content/products/control/1.3.0/configuration-reference/modules/external-modules.mdx` at commit `eaf7a020437971baeee95e87eaf963636040ac71`.

Control brings together the external module families below. Their versions are verified against the resolved Maven dependencies and the generated distribution for the current build.

Platform, Pipes, and AuthN follow the shared Access runtime line. Control uses the newer Entra ID, Tokens, and CQ versions required by its Flow and integration dependencies.

| Module | Runtime artifacts | Runtime version | Documentation | Coverage |
| --- | --- | --- | --- | --- |
| Audit | `AuditModule` | `2026.117` | [2026.117](/modules/audit/2026.117/) | Version matches |
| AuthN | `AuthNModule`, `AuthenticatorModule`, `fortified-authn-saml-sp` | `2026.88` | [2026.88](/modules/authn/2026.88/) | Version matches |
| CEF | `CefEventModule` | `2026.117` | [2026.117](/modules/cef/2026.117/) | Version matches |
| EntraID | `GraphApiModule`, `entraid-pipes`, `entraid-api` | `2026.28` | [2026.28](/modules/entraid/2026.28/) | Version matches |
| HttpClient | `HttpClient` | `2026.117` | [2026.117](/modules/http-client/2026.117/) | Version matches |
| InformationEndpoint | `InformationEndpoint` | `2026.117` | [2026.117](/modules/information-endpoint/2026.117/) | Version matches |
| JdbcClient | `JdbcClient` | `2026.117` | [2026.117](/modules/jdbc-client/2026.117/) | Version matches |
| LdapClient | `LdapClient` | `2026.117` | [2026.117](/modules/ldap-client/2026.117/) | Version matches |
| Node | `Node` | `2026.117` | [2026.117](/modules/node/2026.117/) | Version matches |
| Pipes | `PipeModule`, `PipesModule` | `2026.117` | [2026.117](/modules/pipes/2026.117/) | Version matches |
| RadiusClient | `RadiusClient` | `2026.117` | [2026.117](/modules/radius-client/2026.117/) | Version matches |
| Resource | `Resource` | `2026.117` | [2026.117](/modules/resources/2026.117/) | Version matches |
| Scheduler | `Scheduler` | `2026.117` | [2026.117](/modules/scheduler/2026.117/) | Version matches |
| SmtpClient | `SmtpClient` | `2026.117` | [2026.117](/modules/smtp-client/2026.117/) | Version matches |
| Tokens | `OathValidationModule`, `WebAuthnValidationModule`, `tokens-pipes`, `tokens-api` | `2026.9` | [2026.9](/modules/tokens/2026.9/) | Version matches |
| WorkOrders | `flow-mod`, `flow-pipes`, `flow-api`, `flow-db`, `accounts-mod`, `accounts-api`, `accounts-db` | `2026.7` | [2024.57](/modules/workorders/2024.57/) | Versions differ |

Platform modules also include `Heartbeat` `2026.117`; see [Heartbeat](/products/access/3.9.1/operations/health-check/).

:::note
Runtime versions and documentation versions are recorded separately. The available WorkOrders reference is version 2024.57, while the included Flow / WorkOrders runtime is 2026.7. These versions differ; the reference does not establish runtime compatibility.
:::

## Upgrade verification

:::caution
The resolved runtime versions pass the Control build and automated test suite, but existing installations can have configuration, extensions, and database state that the automated tests do not cover. Validate the affected functions in a representative environment before upgrading production.
:::

Manually verify the areas used by your installation:

| Area           | Verification                                                                                                                                                                                         |
| -------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Authentication | Complete the configured AuthN and SAML sign-in and sign-out flows.                                                                                                                                   |
| Entra ID       | Test Graph connectivity and group membership changes, including both `execution_mode: per_item` and `execution_mode: once` where they are used.                                                      |
| Tokens         | Test OATH and WebAuthn validation against existing token data and database configuration.                                                                                                            |
| CQ and JDBC    | Validate Liquibase history and the CQ-backed database schema in both an upgraded environment and a clean installation. Also verify connection recycling and timeouts for the configured JDBC pool.   |
| LDAP and audit | Test `LDAPModify` operations and expected audit events. Rebuild custom Java extensions that instantiate `LDAPModifyValve` directly because its constructor now also receives the platform event bus. |

Keep a backup of configuration and application databases, and confirm the rollback procedure before the production upgrade.

## Configuration included in the distribution

The generated distribution includes module declarations for `AuthN`, `CefEventModule`, `InformationEndpoint`, and `Pipes`. It also includes declarations for the Control-specific `Forms` and `Api` modules.

These files provide the standard packaged configuration. Installations can replace or extend them with the modules required for their deployment.

## Packaged web interfaces

The following versioned web-interface artifacts are unpacked into the Control distribution.

| Function             | Packaged artifact and version | Documentation                                                            |
| -------------------- | ----------------------------- | ------------------------------------------------------------------------ |
| Forms                | `forms` `0.3.6`               | [Forms](/products/control/key-components/forms/)                                      |
| Control Launchpad    | `control-launchpad` `0.2.1`   | [Launchpad](/products/control/key-components/forms/launchpad/)                        |
| Audit                | `audit` `0.0.1`               | [Audit](/modules/audit/2026.117/)                               |
| Information Endpoint | `infoendpoint` `2.0.2`        | [Information endpoint](/modules/information-endpoint/2026.117/) |

:::note
Included means that the module is available when you need it. It does not mean that the module is enabled or required in every installation.
:::

## Default startup behavior

When the platform server starts without an explicit bootstrap module, `Node` gets things moving by default.

The other modules are not deployed automatically simply because they are included. Declare and configure the modules your installation needs.

## Supporting libraries

Internal APIs and libraries are implementation dependencies rather than independently configured Control components. The generated distribution includes `cq-*` `2026.15`, the line used by Control's Flow, Entra ID, and Tokens dependencies, together with `foss-api-*` `2026.11` and the other transitive libraries resolved by Maven. Their complete versions belong in the generated SBOM and license material rather than in the product-module inventory above.