> For the complete documentation index, see [llms.txt](https://docs.fortifiedid.se/control/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.fortifiedid.se/control/configuration-reference/modules/external-modules.md). # External modules External modules and module families used by the current Control build. Control brings together the external module families below. Their versions are verified against the resolved Maven dependencies and the generated distribution for the current build. Platform, Pipes, and AuthN follow the shared Access runtime line. Control uses the newer Entra ID, Tokens, and CQ versions required by its Flow and integration dependencies. | Module family | Included modules or artifacts | Resolved version | Documentation | | ----------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | AuthN | `AuthNModule`, `AuthenticatorModule`, `fortified-authn-saml-sp` | `2026.88` | [AuthN](https://docs.fortifiedid.se/authn/) | | Platform modules | `AuditModule`, `CefEventModule`, `Heartbeat`, `HttpClient`, `InformationEndpoint`, `JdbcClient`, `LdapClient`, `Node`, `RadiusClient`, `Resource`, `Scheduler`, `SmtpClient` | `2026.117` | [Audit](https://docs.fortifiedid.se/audit), [CEF](https://docs.fortifiedid.se/cef/), [Heartbeat](https://docs.fortifiedid.se/access/readme/operations/health-check), [HTTP client](https://docs.fortifiedid.se/httpclient/), [Information endpoint](https://docs.fortifiedid.se/information-endpoint), [JDBC client](https://docs.fortifiedid.se/jdbcclient/), [LDAP client](https://docs.fortifiedid.se/ldapclient/), [Node](https://docs.fortifiedid.se/node/), [RADIUS client](https://docs.fortifiedid.se/radiusclient), [Resource](https://docs.fortifiedid.se/resources), [Scheduler](https://docs.fortifiedid.se/scheduler/), [SMTP](https://docs.fortifiedid.se/smtp/) | | Pipes | `PipeModule`, `PipesModule` | `2026.117` | [Pipes](https://docs.fortifiedid.se/pipes/) | | Entra ID | `GraphApiModule`, `entraid-pipes`, `entraid-api` | `2026.28` | [Entra ID](https://docs.fortifiedid.se/entraid) | | Flow / WorkOrders | `flow-mod`, `flow-pipes`, `flow-api`, `flow-db`, `accounts-mod`, `accounts-api`, `accounts-db` | `2026.7` | [WorkOrders](https://docs.fortifiedid.se/workorders) | | Tokens | `OathValidationModule`, `WebAuthnValidationModule`, `tokens-pipes`, `tokens-api` | `2026.9` | [Tokens](https://docs.fortifiedid.se/tokens/) | ## Upgrade verification {% hint style="warning" %} The resolved runtime versions pass the Control build and automated test suite, but existing installations can have configuration, extensions, and database state that the automated tests do not cover. Validate the affected functions in a representative environment before upgrading production. {% endhint %} Manually verify the areas used by your installation: | Area | Verification | | -------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Authentication | Complete the configured AuthN and SAML sign-in and sign-out flows. | | Entra ID | Test Graph connectivity and group membership changes, including both `execution_mode: per_item` and `execution_mode: once` where they are used. | | Tokens | Test OATH and WebAuthn validation against existing token data and database configuration. | | CQ and JDBC | Validate Liquibase history and the CQ-backed database schema in both an upgraded environment and a clean installation. Also verify connection recycling and timeouts for the configured JDBC pool. | | LDAP and audit | Test `LDAPModify` operations and expected audit events. Rebuild custom Java extensions that instantiate `LDAPModifyValve` directly because its constructor now also receives the platform event bus. | Keep a backup of configuration and application databases, and confirm the rollback procedure before the production upgrade. ## Configuration included in the distribution The generated distribution includes module declarations for `AuthN`, `CefEventModule`, `InformationEndpoint`, and `Pipes`. It also includes declarations for the Control-specific `Forms` and `Api` modules. These files provide the standard packaged configuration. Installations can replace or extend them with the modules required for their deployment. ## Packaged web interfaces The following versioned web-interface artifacts are unpacked into the Control distribution. | Function | Packaged artifact and version | Documentation | | -------------------- | ----------------------------- | ------------------------------------------------------------------------ | | Forms | `forms` `0.3.6` | [Forms](/control/key-components/forms.md) | | Control Launchpad | `control-launchpad` `0.2.1` | [Launchpad](/control/key-components/forms/launchpad.md) | | Audit | `audit` `0.0.1` | [Audit](https://docs.fortifiedid.se/audit) | | Information Endpoint | `infoendpoint` `2.0.2` | [Information endpoint](https://docs.fortifiedid.se/information-endpoint) | {% hint style="info" %} Included means that the module is available when you need it. It does not mean that the module is enabled or required in every installation. {% endhint %} ## Default startup behavior When the platform server starts without an explicit bootstrap module, `Node` gets things moving by default. The other modules are not deployed automatically simply because they are included. Declare and configure the modules your installation needs. ## Supporting libraries Internal APIs and libraries are implementation dependencies rather than independently configured Control components. The generated distribution includes `cq-*` `2026.15`, the line used by Control's Flow, Entra ID, and Tokens dependencies, together with `foss-api-*` `2026.11` and the other transitive libraries resolved by Maven. Their complete versions belong in the generated SBOM and license material rather than in the product-module inventory above.