Canon imagePRESS 1135 Series Service Manual page 216

2
Technology > MEAP > Login Service > Authentication methods
Differences from conventional SSO
Domain C
Domain B
D C D C
D C
S A
Device
Domain A
SSO
Local device authentication
This is an authentication method that is used for single iR devices. The authenticating
users are registered in the iR device's database. User management is performed on the
Web application provided by the device, or from the imageWARE Enterprise Management
Console/ iW Management Console. The login destination is 'This device'.
2 Technology > MEAP > Login Service > Authentication methods
Domain B
DomainC
D C D C
D C
Device
Domain A
SSO-H
F-2-250
Domain authentication + local device authentication
This is a user authentication method that provides both domain authentication and local
device authentication functionalities. Principally, domain users who are registered/ managed
by the Active Directory are authenticated by domain authentication, and local device
authentication can be used when it is necessary to au thenticate a temporary user that cannot
be added to the Active Directory. Also, should there be any kind of a problem with the domain
controller or Security Agent (SSO only), local device authentication can be used in emergency
situations, while waiting for normal status to be restored.
In the figure shown below, users belonging to Domain A, which includes the iR device,
and users belonging to Domain B, which has a reliable relationship with Domain A, can be
authenticated, and users registered with the iR device itself can also be registered. The login
destination (domain name or [This device]) is se lected by the user upon login.
Domain A
Accounting Manager Security Agent
Domain A User
iR Device
2-168
Domain B
Domain Controller
Domain Controller
( Active Directory ) ( Active Directory )
Domain B User
2-168
F-2-251