External modules

Control brings together the external module families below. Their versions are verified against the resolved Maven dependencies and the generated distribution for the current build.

Platform, Pipes, and AuthN follow the shared Access runtime line. Control uses the newer Entra ID, Tokens, and CQ versions required by its Flow and integration dependencies.

Module	Runtime artifacts	Runtime version	Documentation	Coverage
Audit	Audit	2026.117	2026.117	Version matches
AuthN	AuthNModule, AuthenticatorModule, fortified-authn-saml-sp	2026.88	2026.88	Version matches
CEF	CefEventModule	2026.117	2026.117	Version matches
EntraID	GraphApiModule, entraid-pipes, entraid-api	2026.28	2026.28	Version matches
HttpClient	HttpClient	2026.117	2026.117	Version matches
InformationEndpoint	InformationEndpoint	2026.117	2026.117	Version matches
JdbcClient	JdbcClient	2026.117	2026.117	Version matches
LdapClient	LdapClient	2026.117	2026.117	Version matches
Node	Node	2026.117	2026.117	Version matches
Pipes	PipeModule, PipesModule	2026.117	2026.117	Version matches
RadiusClient	RadiusClient	2026.117	2026.117	Version matches
Resource	Resource	2026.117	2026.117	Version matches
Scheduler	Scheduler	2026.117	2026.117	Version matches
SmtpClient	SmtpClient	2026.117	2026.117	Version matches
Tokens	OathValidationModule, WebAuthnValidationModule, tokens-pipes, tokens-api	2026.9	2026.9	Version matches
WorkOrders	flow-mod, flow-pipes, flow-api, flow-db, accounts-mod, accounts-api, accounts-db	2026.7	2024.57	Versions differ

Platform modules also include Heartbeat 2026.117; see Heartbeat.

Note

Runtime versions and documentation versions are recorded separately. The available WorkOrders reference is version 2024.57, while the included Flow / WorkOrders runtime is 2026.7. These versions differ; the reference does not establish runtime compatibility.

Upgrade verification

Caution

The resolved runtime versions pass the Control build and automated test suite, but existing installations can have configuration, extensions, and database state that the automated tests do not cover. Validate the affected functions in a representative environment before upgrading production.

Manually verify the areas used by your installation:

Area	Verification
Authentication	Complete the configured AuthN and SAML sign-in and sign-out flows.
Entra ID	Test Graph connectivity and group membership changes, including both execution_mode: per_item and execution_mode: once where they are used.
Tokens	Test OATH and WebAuthn validation against existing token data and database configuration.
CQ and JDBC	Validate Liquibase history and the CQ-backed database schema in both an upgraded environment and a clean installation. Also verify connection recycling and timeouts for the configured JDBC pool.
LDAP and audit	Test LDAPModify operations and expected audit events. Rebuild custom Java extensions that instantiate LDAPModifyValve directly because its constructor now also receives the platform event bus.

Keep a backup of configuration and application databases, and confirm the rollback procedure before the production upgrade.

Configuration included in the distribution

The generated distribution includes module declarations for AuthN, CefEventModule, InformationEndpoint, and Pipes. It also includes declarations for the Control-specific Forms and Api modules.

These files provide the standard packaged configuration. Installations can replace or extend them with the modules required for their deployment.

Packaged web interfaces

The following versioned web-interface artifacts are unpacked into the Control distribution.

Function	Packaged artifact and version	Documentation
Forms	forms 0.3.6	Forms
Control Launchpad	control-launchpad 0.2.1	Launchpad
Audit	audit 0.0.1	Audit
Information Endpoint	infoendpoint 2.0.2	Information endpoint

Note

Included means that the module is available when you need it. It does not mean that the module is enabled or required in every installation.

Default startup behavior

When the platform server starts without an explicit bootstrap module, Node gets things moving by default.

The other modules are not deployed automatically simply because they are included. Declare and configure the modules your installation needs.

Supporting libraries

Internal APIs and libraries are implementation dependencies rather than independently configured Control components. The generated distribution includes cq-* 2026.15, the line used by Control's Flow, Entra ID, and Tokens dependencies, together with foss-api-* 2026.11 and the other transitive libraries resolved by Maven. Their complete versions belong in the generated SBOM and license material rather than in the product-module inventory above.