In this mode of authentication, you will be using Department ID Management or you will not be using any authentication mechanism. If you enable the Department

ID Management in the MEAP device's Additional Functions mode, the user can use the device only when he/she enters an ID number (a 7-character ID and pass-

word) that has been registered from the device's touch panel display or through Remote UI.

Outline of SDL (Simple Device Login)

In this mode of authentication, you will be operating on a MEAP device on its own. You will store user information to the MEAP device's memory by accessing

the device through a Web browser. SDL offers the following functions:

a. it brings up the Login screen on the MEAP device's touch panel display for user authentication.

b. it brings up the Login page when you access the MEAP device from Web browser to manage the numbers of printed and scanned sheets for each department ID

working with the department ID management function. it operates in conjunction with the group ID control mechanisms to keep track of the number of print

pages or scan pages according to group IDs.

c. it enables register/editing of user authentication information through a Web browser.

Outline of SSO (Single Sign-On)

This is the log-in service that can be operated on the domain of Active Directory environment network or at iR device. The following are the user authentication

systems.

- Domain Authentication

- Local Device Authentication

- Domain Authentication + Local Device Authentication

- The three user authentication systems can be changed at Web browser (See 'Setting the User Authentication System' on MEAP Administrator Guide).

- The default setting is 'Domain Authentication + Local Device Authentication'. To increase security, set 'Domain Authentication' as user authentication system

or change the user name and password of the administrator of Local Device Authentication from the default ones, just after starting to use SSO.

Domain Anthentication

This is the authentication of the domains on network simultaneously with log-in to iR device, in combination with the domain controller on Active Directory envi-

ronment network. It authenticates up to four domain users (multi domain) with trusts as well as the domain with iR device installed. Users select the domain name

of log-in destination when they log in.

Optional NetSpot Accountant or imageWARE Accounting Manager enables analysis / management of the usage of iR device.

Local Device Anthentication

This is the user authentication used for only iR device itself. The users to be authenticated is registered / managed by the database of iR device. The method of

registration / management is the same as the one for SDL. The log-in destination is [this device].

Domain Authentication + Local Device Anthentication

This is the user authentication system with the functions of both 'Domain Authentication' and 'Local Device Authentication'. Domain Authentication is useful to

authenticate the users registered / managed by Active Directory, and Local Device Authentication is for authentication of the temporary users being not able to be

added to Active Directory. In the case that any trouble of domain controller or Security Agent occurs, using Local Device Authentication enables emergency action

until recovery.

In the following example, Domain A user with iR installed and Domain B having trusts with Domain A, and also the users registered in iR device itself can be

authenticated. Users select the login destination (domain name or [This Device]) when they log in.

F-11-52

Chapter 11

11-33

Table of Contents