Login Service - Canon imagePRESS 1135 Series Service Manual

2
Technology > MEAP > Login Service > Default Authentication overview

Login Service

The login service is used to authenticate the user when a MEAP device is booted up. Login
service changes and install/ uninstall are carried out from the 'System Management' page.
The pre-install applications and those provided on the accessory CD are as follows. Default
Authentication is used as the default at the time of shipment from the factory.
Pre-install Default Authentication(default)
Simple Device Login Single Sign On
Accessory CD Default Authentication
Simple Device Login
Single Sign On and Security Agent
CAUTION:
• When the login service is set to SSO-H, Department ID management needs to be
[OFF] before changes can be made. To use SSO-H local device authentication and
Department ID management at the same time, after allocation of the department ID
to the Administrator, switch the authentication method to local device authentication
and then turn Department ID management ON.
• To use Department ID management in domain authentication, the option
imageWARE accounting manager is required.
• When the setting is SSO-H, the card reader for the option controller card cannot be
used.
• When using SSO-H, the clock settings of the server managing the Active Directory
and the MEAP device (and the PC used to log in), must be matched. If there is a
time difference of greater than five minutes in the clock settings, an error will be
generated when login is attempted.
• When the setting is SSO-H, start up takes a little longer when compared to Default
Authentication (because of the time required for object initialization).
• To use the SEND function when the setting is for SSO-H, when sending email, mail
addresses need to be programmed against each user. If they are not, email cannot
be sent. Note, however, that when sending i-Fax, the mail addresses set in the
device are used.
2 Technology > MEAP > Login Service > Default Authentication overview
CAUTION:
Important information when using conventional SSO and SDL
• When the login method setting is for SDL, the information registered in SDL must
match the Department ID management user information (department ID and
password).
• When the login method setting is for SDL and SSO, Department ID management
needs to be [OFF] before making any changes. To use SDL and Department ID
management together, switch the login service to SDL and then turn the Department
ID management ON.
• To run Department ID management when the setting is for SSO, the options Net
Spot Accountant / imageWARE Accounting Manager are required.
• When the setting is SSO, the option card reader cannot be used.
• When using SSO, the clock settings of the server managing the Active Directory and
the MEAP device (and the PC used to log in), must be matched. If there is a time
difference of greater than 30 minutes in the clock settings, an error will be generated
when login is attempted with SSO.
• When the setting is for SDL or SSO, startup may take a little longer.
...To use the SEND function when the setting is for SDL and SSO, when sending email,
mail addresses need to be programmed against each user. If they are not, email cannot
be sent. Note, however, that when sending i-Fax, the mail addresses set in the device
are used.
■ Default Authentication overview
Default Authentication is the login service that is selected when Department ID management
is being used, or when no authentication function has been set. When Department ID
management has been set [ON] in the MEAP device user mode, by entering a seven digit
department ID for each department, and a password number for each department ID, access
to the MEAP device can be restricted to those users who enter the code numbers. The
department ID and password number can be entered using the MEAP device touch panel
display and Remote UI.
2-166
2-166