Canon iR7086, Service Manual

Page: 453 / 735

Chapter 11
11-33
In this mode of authentication, you will be using Department ID Management or you will not be using any authentication mechanism. If you enable the Department
ID Management in the MEAP device's Additional Functions mode, the user can use the device only when he/she enters an ID number (a 7-character ID and pass-
word) that has been registered from the device's touch panel display or through Remote UI.
Outline of SDL (Simple Device Login)
In this mode of authentication, you will be operating on a MEAP device on its own. You will store user information to the MEAP device's memory by accessing
the device through a Web browser. SDL offers the following functions:
a. it brings up the Login screen on the MEAP device's touch panel display for user authentication.
b. it brings up the Login page when you access the MEAP device from Web browser to manage the numbers of printed and scanned sheets for each department ID
working with the department ID management function. it operates in conjunction with the group ID control mechanisms to keep track of the number of print
pages or scan pages according to group IDs.
c. it enables register/editing of user authentication information through a Web browser.
F-11-52
Outline of SSO (Single Sign-On)
This is the log-in service that can be operated on the domain of Active Directory environment network or at iR device. The following are the user authentication
systems.
- Domain Authentication
- Local Device Authentication
- Domain Authenti Local Device Authentication
- The three user authentication systems can be changed at Web browser (See 'Setting the User Authentication System' on MEAP Administrator Guide).
- The default setting is 'Domain Authenti Local Device Authentication'. To increase security, set 'Domain Authentication' as user authentication system
or change the user name and password of the administrator of Local Device Authentication from the default ones, just after starting to use SSO.
Domain Anthentication
This is the authentication of the domains on network simultaneously with log-in to iR device, in combination with the domain controller on Active Directory envi-
ronment network. It authenticates up to four domain users (multi domain) with trusts as well as the domain with iR device installed. Users select the domain name
of log-in destination when they log in.
Optional NetSpot Accountant or imageWARE Accounting Manager enables analysis / management of the usage of iR device.
Local Device Anthentication
This is the user authentication used for only iR device itself. The users to be authenticated is registered / managed by the database of iR device. The method of
registration / management is the same as the one for SDL. The log-in destination is [this device].
Domain Authenti Local Device Anthentication
This is the user authentication system with the functions of both 'Domain Authentication' and 'Local Device Authentication'. Domain Authentication is useful to
authenticate the users registered / managed by Active Directory, and Local Device Authentication is for authentication of the temporary users being not able to be
added to Active Directory. In the case that any trouble of domain controller or Security Agent occurs, using Local Device Authentication enables emergency action
until recovery.
In the following example, Domain A user with iR installed and Domain B having trusts with Domain A, and also the users registered in iR device itself can be
authenticated. Users select the login destination (domain name or [This Device]) when they log in.