The type of authentication framework used depends on whether you use the Java or .NET version of the Presentation API.
To use the Endeca Access Control System on machines running the Java version of the Presentation API, you need the Java Authentication and Authorization Service (JAAS) to function as its framework.
You can obtain JAAS by using Java 2 SDK version 1.4.x (or later), which includes JAAS.
To use the Endeca Access Control System on machines running the .NET version of the Presentation API, you need the .NET Framework. The .NET Framework permits applications to remain independent from underlying authentication technologies.
You can obtain the .NET Framework version redistributable package from the downloads section of the Microsoft Web site.
The plug-in classes are in the Endeca.Navigation.AccessControl.dll file, which is shipped in the %Endeca_Root%\lib\Endeca.NET directory