Authentication overview

There are two aspects of authentication through the Rational® ClearQuest® API:
  • AuthenticationAlgorithm, for enabling or disabling a schema repository to allow LDAP authentication.
  • AuthenticationMode, for selecting the mode of authentication for individual Rational® ClearQuest® users.

The AuthenticationAlgorithm allows LDAP authentication that uses existing user LDAP authentication names, which may not match Rational® ClearQuest® user account names.

The Rational® ClearQuest® user profile field that is used for correlating LDAP user records to Rational® ClearQuest® user records is the CQLDAPMap field.

You can specify a CQLDAPMap field (using the installutil command line utility) to map a Rational® ClearQuest® user profile field to an LDAP field value for LDAP authentication.

The authentication method used for an individual user is determined by the AuthenticationMode specified for that user, not the AuthenticationAlgorithm.