Canon imagePRESS C1 Service Manual - page 680
Chapter 11
11-35
F-11-51
Local device authentication
This is an authentication method that is used for single iR devices. The authenticating users are registered in the iR device's database. User management is performed
on the Web application provided by the device, or from the imageWARE Enterprise Management Console/ iW Management Console. The login destination is 'This
device'.
Domain authentication + local device authentication
This is a user authentication method that provides both domain authentication and local device authentication functionalities. Principally, domain users who are
registered/ managed by the Active Directory are authenticated by domain authentication, and local device authentication can be used when it is necessary to au-
thenticate a temporary user that cannot be added to the Active Directory. Also, should there be any kind of a problem with the domain controller or Security Agent
(SSO only), local device authentication can be used in emergency situations, while waiting for normal status to be restored.
In the figure shown below, users belonging to Domain A, which includes the iR device, and users belonging to Domain B, which has a reliable relationship with
Domain A, can be authenticated, and users registered with the iR device itself can also be registered. The login destination (domain name or [This device]) is se-
lected by the user upon login.
F-11-52
Linkage with Department ID management when using SSO-H
- To run domain authentication and Department ID management at the same time, the options Net Spot Accountant, iW Accounting Manager or iW EMC Accounting
Management Plug-in are required. If domain authentication is selected as the authentication method without linkage to these systems, login will be disabled and
Department ID management will not come ON. If Department ID management cannot be turned ON when using domain authentication and login is disabled, switch
the login service to Default Authentication and turn Department ID management OFF.
- When SSO is linked to Net Spot Accountant, iW Accounting Manager or iW EMC Accounting Management Plug-in, and is to be used with Department ID
management turned ON, users belonging to the Domain Admin group need to be allocated to the Security Agent service account.
- In order to link local device authentication and Department ID management and manage print pages and scan pages per department ID, Department ID management
must be set ON.
To run local device authentication and Department ID management at the same time, the information registered in local device authentication must match the
Department ID management user information (department ID and password).
- User information registered in SDL and that registered in local device authentication are managed separately in the iR device. User information registered in one is
not reflected in the other.
- In local device authentication the card reader for the option control card cannot be used. To use the card reader for the option control card, set SDL.
- Security Agent is only required when using the conventional SSO.
- To use the conventional SSO and Security Agent, they must be installed in the computer belonging to the domain that includes the iR device.
- The Security Agent installer is included in the MEAP Administrator CD-ROM.
Domain A User
iR Device
Domain B User
Accounting Manager
Security Agent
Domain Controller
( Active Directory )
Domain A
Domain B
Domain Controller
( Active Directory )