Knowledge Discovery 25.4
Document Security Administration Guide

# System Architecture

To configure custom mapped security, you must set up the following components:

- A connector to extract information from your repository. The connector must add an ACL to each document, and add a field that identifies the custom security type. You can use a connector processor in NiFi Ingest, or a stand-alone connector with CFS.
- OpenText Content component. You must specify the format of the ACL and the sequence of security checks to perform.

The connector retrieves information from your data repository and NiFi Ingest processes it to index into Content. The connector adds an encrypted ACL to each document. The ACL is in a custom format.

When Content receives a query, it sends the user's `securityinfo` token and the result documents to the Generic Security Module, part of the Mapped Security Plug-in. The Generic Security Module determines whether a user is allowed to see documents retrieved as query results. The structure of the ACL and the sequence of security checks that the Generic Security Module must perform are specified by configuration parameters in the Content component configuration file.

Copyright 2025 Open Text
Version 25.4 | Last updated October 2025

Send documentation feedback

Close

Send documentation feedback

To send feedback using your default email client, open an email window.

Otherwise, send your feedback and the information below to MFI-swpdl.idoldocsfeedback@opentext.com.

We appreciate your feedback!

Product: Knowledge Discovery 25.4

Topic Title: System Architecture