Certain plugins can be linked together with other plugins. Its a short list of just CrushLDAPGroup and Radius, as well as SAMLSSO and WebApplication.

This allows you to have a SAML authentication process that got through its redirects and comes back to CrushFTP with the username provided by SAML. Instead of CrushFTP suing this to lookup group associations and access via LDAP queries, you can allow the WebApplication plugin to make HTTP calls to land the user.XML, VFS.XML, and VFS properties for the user.