This is an authentication method that is used for single iR devices. The authenticating users are registered in the iR device's database. User management is performed

on the Web application provided by the device, or from the imageWARE Enterprise Management Console/ iW Management Console. The login destination is 'This

device'.

Domain authentication + local device authentication

This is a user authentication method that provides both domain authentication and local device authentication functionalities. Principally, domain users who are

registered/ managed by the Active Directory are authenticated by domain authentication, and local device authentication can be used when it is necessary to au-

thenticate a temporary user that cannot be added to the Active Directory. Also, should there be any kind of a problem with the domain controller or Security Agent

(SSO only), local device authentication can be used in emergency situations, while waiting for normal status to be restored.

In the figure shown below, users belonging to Domain A, which includes the iR device, and users belonging to Domain B, which has a reliable relationship with

Domain A, can be authenticated, and users registered with the iR device itself can also be registered. The login destination (domain name or [This device]) is se-

lected by the user upon login.

Accounting Manager

- To run domain authentication and Department ID management at the same time, the options Net Spot Accountant, iW Accounting Manager or iW EMC Accounting

Management Plug-in are required. If domain authentication is selected as the authentication method without linkage to these systems, login will be disabled and

Department ID management will not come ON. If Department ID management cannot be turned ON when using domain authentication and login is disabled, switch

the login service to Default Authentication and turn Department ID management OFF.

- When SSO is linked to Net Spot Accountant, iW Accounting Manager or iW EMC Accounting Management Plug-in, and is to be used with Department ID

management turned ON, users belonging to the Domain Admin group need to be allocated to the Security Agent service account.

- In order to link local device authentication and Department ID management and manage print pages and scan pages per department ID, Department ID management

must be set ON.

To run local device authentication and Department ID management at the same time, the information registered in local device authentication must match the

Department ID management user information (department ID and password).

- User information registered in SDL and that registered in local device authentication are managed separately in the iR device. User information registered in one is

not reflected in the other.

- In local device authentication the card reader for the option control card cannot be used. To use the card reader for the option control card, set SDL.

- Security Agent is only required when using the conventional SSO.

- To use the conventional SSO and Security Agent, they must be installed in the computer belonging to the domain that includes the iR device.

- The Security Agent installer is included in the MEAP Administrator CD-ROM.

Linkage with Department ID management when using SSO-H

Domain A

Security Agent

Domain A User

iR Device

F-11-51

Domain Controller

( Active Directory )

F-11-52