Enhanced System Application Management; Outline; About Login Service; Default Authentication Overview - Canon imageCLASS LBP6780dn Service Manual

2
Technology > MEAP > Enhanced System Application Management > SSO-H (Single Sign-On-H) overview

Enhanced System Application Management

■ Outline

[ Enhanced System Application Management ] mainly manages the login services for logging
in to devices.
• Installing and uninstalling Enhanced System Application Management (login services, etc.)
• Switching login services (switching the method to log in to devices)
• Checking installation status of other System Applications

■ About Login Service

The login service is started up to authenticate the user when MEAP-enabled iR device is
booted up. Login service changes and install/ uninstall are carried out from the 'System
Management' page.
The preinstalled login applications are Default Authentication and Single Sign On-H, and
Default Authentication is enabled by default.

■ Default Authentication overview

Default Authentication is a pre-installed login application that runs by default. It provides
authentication functions to allow minimum operation of the Controller System, even when no
other login application is running.
2 Technology > MEAP > Enhanced System Application Management > SSO-H (Single Sign-On-H) overview

■ SSO-H (Single Sign-On-H) overview

This is a merger of the existing SDL and SSO login services and has the following features.
• The following three authentication methods may be selected from.
• Server authentication
• Server authentication and local authentication
• Local device authentication
• Active Directory or LDAP can be used as the server for server authentication.
• It is not necessary to prepare a server for Security Agent (SA). (In the case of SSO, SA is
necessary.)
● Environment confirmation
Refer to the section of "Preparation for Using SSO-H" of this manual for system requirements
needed in each login service.
● Specification of SSO-H
Item
No. of local device users
Maximum number of domains
IPv6
Resource used
F-2-117
Network ports used Connecting 88 : KDC
Supported authentication server Active Directory : Windows 2000 Server SP4/ Windows Server
Supported Active Directory
Availability of Department
Management Linkage
Specification
Up to 5000
Active Directory : 200 domains ("This device" not included)
Authentication provided in IPv6 supports AD/KDC/DNS of
Windows Server 2008 only)
Memory : 3584KB
Storage : 25000KB
File Description : 27 Thread : 33
Socket : 33
53 : DNS
1 - 65535 ( Default : 389) : LDAP
Listening 10000 - 10100
2003 SP1 * / Windows Server 2003 R2 * / Windows 2008 Server *
*64-bit OS is not supported.
LDAP :
Novell eDirectory V8.8 SP6 for Windows Lotus Domino V8.5 for
Window
Windows Server 2003 SP2
Windows Server 2003 R2 SP2
Windows Server 2008 SP2(64BitOS not supported)
Windows Server 2008 R2 SP1
Available only in local authentication
2-58
T-2-17
2-58