Canon imageRUNNER 5065 series, Service Manual

Page: 377 / 596

Chapter 11
11-29
F-11-51
Outline of SSO (Single Sign-On)
This is the log-in service that can be operated on the domain of Active Directory environment network or at iR device. The following are the user authentication
systems.
- Domain Authentication
- Local Device Authentication
- Domain Authenti Local Device Authentication
- The three user authentication systems can be changed at Web browser (See 'Setting the User Authentication System' on MEAP Administrator Guide).
- The default setting is 'Domain Authenti Local Device Authentication'. To increase security, set 'Domain Authentication' as user authentication system
or change the user name and password of the administrator of Local Device Authentication from the default ones, just after starting to use SSO.
Domain Anthentication
This is the authentication of the domains on network simultaneously with log-in to iR device, in combination with the domain controller on Active Directory envi-
ronment network. It authenticates up to four domain users (multi domain) with trusts as well as the domain with iR device installed. Users select the domain name
of log-in destination when they log in.
Optional NetSpot Accountant or imageWARE Accounting Manager enables analysis / management of the usage of iR device.
Local Device Anthentication
This is the user authentication used for only iR device itself. The users to be authenticated is registered / managed by the database of iR device. The method of
registration / management is the same as the one for SDL. The log-in destination is [this device].
Domain Authenti Local Device Anthentication
This is the user authentication system with the functions of both 'Domain Authentication' and 'Local Device Authentication'. Domain Authentication is useful to
authenticate the users registered / managed by Active Directory, and Local Device Authentication is for authentication of the temporary users being not able to be
added to Active Directory. In the case that any trouble of domain controller or Security Agent occurs, using Local Device Authentication enables emergency action
until recovery.
In the following example, Domain A user with iR installed and Domain B having trusts with Domain A, and also the users registered in iR device itself can be
authenticated. Users select the login destination (domain name or [This Device]) when they log in.
F-11-52
- Optional NetSpot Accountant or imageWARE Accounting Manager is necessary to use Domain Authentication and department ID management
simultaneously. When Domain Authentication is set without combination with NetSpot Accountant or imageWARE Accounting Manager, log-in is impossible.
Domain A
Domain B
NetSpot
Accountant
Security Agent
Domain
Controller
(Active Directory)
Domain A User
Domain B User
iR
Domain
Controller
(Active Directory)