Canon iR3245, Service Manual

Page: 381 / 746

Chapter 11
11-35
Differences from conventional SSO
F-11-51
Local device authentication
This is an authentication method that is used for single iR devices. The authenticating users are registered in the iR device's database. User management is performed
on the Web application provided by the device, or from the imageWARE Enterprise Management Console/ iW Management Console. The login destination is 'This
device'.
Domain authenti local device authentication
This is a user authentication method that provides both domain authentication and local device authentication functionalities. Principally, domain users who are
registered/ managed by the Active Directory are authenticated by domain authentication, and local device authentication can be used when it is necessary to au-
thenticate a temporary user that cannot be added to the Active Directory. Also, should there be any kind of a problem with the domain controller or Security Agent
(SSO only), local device authentication can be used in emergency situations, while waiting for normal status to be restored.
In the figure shown below, users belonging to Domain A, which includes the iR device, and users belonging to Domain B, which has a reliable relationship with
Domain A, can be authenticated, and users registered with the iR device itself can also be registered. The login destination (domain name or [This device]) is se-
lected by the user upon login.
F-11-52
Domain B Domain C
Domain A
SA
DC
DC DC
Device
DC
DC DC
Device
SSO
SSO-H
Domain B Domain C
Domain A