Authentication overview

There are two aspects of authentication through the Rational® ClearQuest® API:
  • AuthenticationAlgorithm, for enabling or disabling a schema repository to allow LDAP authentication.
  • AuthenticationMode, for selecting the mode of authentication for individual Rational ClearQuest users.

The AuthenticationAlgorithm allows LDAP authentication that uses existing user LDAP authentication names, which may not match Rational ClearQuest user account names.

The Rational ClearQuest user profile field that is used for correlating LDAP user records to Rational ClearQuest user records is the CQLDAPMap field.

You can specify a CQLDAPMap field (using the installutil command line utility) to map a Rational ClearQuest user profile field to an LDAP field value for LDAP authentication.

The authentication method used for an individual user is determined by the AuthenticationMode specified for that user, not the AuthenticationAlgorithm.