The passthru plugin gives the credentials from the web server to osTicket, so the authentication needs to be done by the web server. So basically pretty easy ;)
I have not yet tested the pure plugin, only in combination with the ldap plugin, so my experience is kinda limited to ldap + pass thru, but I guess that does not matter ;)