Xerox WorkCentre 5735 System Administrator Manual page 165

• Select [Locally on the Device] to validate users listed in the Local User Information
Database. This option requires you to configure accounts in the Local User Information
Database.
• Select [Remotely on the Network] to validate users via an Authentication Server. This
option requires you to have a server that will provide authentication of user login details.
Authentication via Kerberos (Solaris, Windows 2000), NDS (Novell), SMB (Windows
NT4/2000) or LDAP is supported.
b. Select required method from the [Authorization] drop-down menu. The card reader and
Authentication Solution authenticates (validates) the user. The Authorization method
determines which areas of the device a user is allowed to access. There are two options:
• Select [Locally on the Device]: if you want the device to check the Local User
Information Database for levels of authorization.
• Select [Remotely on the Network]: if you want to use an LDAP server to determine
levels of authorization.
If you selected Remotely on the Network (from the Location of Access Rights box), configure LDAP
communications as stated in the Configure Authentication for LDAP/LDAPS in the Authentication
section of this guide.
c. Check the [Automatically retrieve user's e-mail address from LDAP] checkbox under
Personalization if you want to set the From address to the logged in user's e-mail address
when they log in via Secure Access.
d. Click on the [Save] button to return to the Xerox Access Setup page.
6. In the table displaying a list of related configuration setting pages, click the [Edit...] button on the
Xerox Secure Access Setup row.
a. The Xerox Secure Access Setup screen displays. The device will automatically configure itself
to work with the XSA remote server. Click on the [Manually Configure] button if the XSA
remote server does not configure automatically.
b. In the Server Communication area, select either [IPv4 Address] or [Hostname].
c. Enter details in the [IP Address: Port] or [Host Name: Port] fields.
d. Enter the details in the [Path] field.
e. Under the Device Log In Methods heading, select one of the following:
• Xerox Secure Access Device Only (e.g., Swipe Cards - if you want to allow the user to
swipe their swipe cards at the UI.
• Xerox Secure Access Device + alternate on-screen authentication method - if you
want users to authenticate using the device's control panel as well as the XSA feature.
When the second option is enabled, a button labelled "Alternate Login" is displayed on
the "Instructional Blocking Window" providing users with an alternate method to log in.
For example, this feature can be enabled for users who are unable to use their swipe
card. When the alternate button is selected, the remote server presents a series of log in
screens on the local user interface. The remote server is still responsible for
authenticating the user. All other Xerox Secure Access options are supported with this
setting.
f. Under the Accounting Information heading, note that this item will be grayed out if
Network Accounting is not enabled. If accounting is enabled, select [Automatically apply
Accounting Codes from the server], if the Secure Access Server has been configured to
WorkCentre™ 5735/5740/5745/5755/5765/5775/5790
System Administrator Guide
165