About Login Service - Canon imageRUNNER ADVANCE C350 series Service Manual

2
Technical Explanation > MEAP > Enhanced System Application Management > SSO-H (Single Sign-On-H) overview
Enhanced System Application Management
■ Outline
[Enhanced System Application Management] mainly manages the login services for logging
in to devices.
• Installing and uninstalling Enhanced System Application Management (login services, etc.)
• Switching login services (switching the method to log in to devices)
• Checking installation status of other System Applications

■ About Login Service

The login service is started up to authenticate the user when MEAP-enabled device is
booted up. Login service changes and install/ uninstall are carried out from the [System
Management] page.
The preinstalled login applications are Default Authentication and Single Sign On-H, and
Default Authentication is enabled by default.
CAUTION:
• This device does not support SDL, conventional SSO and Security Agent.
2 Technical Explanation > MEAP > Enhanced System Application Management > SSO-H (Single Sign-On-H) overview
■ Default Authentication overview
This login service is selected when the department ID management is enabled or no
authentication function is set. Set the department ID management to [ON] on [Settings
/ Registration] of this device and register 7-digit ID and PIN by department. This setting
restricts the use of this device only to users keying the registered ID and PIN. Department
IDs/ and PINs can be registered on the touch panel of this device or Remote UI.
■ SSO-H (Single Sign-On-H) overview
This is a merger of the existing SDL and SSO login services and has the following features.
• The following three authentication methods may be selected from.
• Server authentication
• Server authentication and local authentication
• Local device authentication
• Active Directory or LDAP can be used as the server for server authentication.
• It is not necessary to prepare a server for Security Agent (SA). (In the case of SSO, SA is
necessary.)
Differences from conventional SSO
F-2-228
Domain A
SSO
Domain B Domain C
DC DC
DC
SA
Device
Domain A
SSO-H
2-152
Domain B Domain C
DC DC
DC
Device
F-2-229
2-152