Configuring User Authentication and Account Track

[Synchronize]/[Do Not Synchronize]

Select whether to synchronize user authentication and account track setting.

If you select [Synchronize] and login by using the user name and password that are used for user authentication, you are also allowed to login to the account to which you belong.

[Account Name]

When you have selected [Synchronize], select the account to which you belong.

[Apply Levels/Groups to Destinations]

To limit access to a destination by users, assign a reference allowed level or reference allowed group to the destination.

After selecting a destination from [Address Book], [Group] or [Program], tap [Apply Level] or [Apply Group], then assign a reference allowed level or reference allowed group to the destination.

[Authenticate]/[OFF]

Specify whether to implement user authentication.

[OFF] is specified by default.

[Authentication Method]

Select a user authentication method.

[ON (MFP)]

The authentication function of this machine is used for user authentication. This authentication method only allows users registered on this machine to use it.

[ON (MFP)] is specified by default.

[External Server Authentication]

Interacts with the authentication server used for user authentication in the operating environment. This authentication method only allows users registered on the authentication server to use this machine.

Register the authentication server beforehand from [Administrator Settings] - [User Authentication/Account Track] - [External Server Settings].

[Main + External Server]

Select this option to enable login using the authentication function of the MFP in case a trouble occurs on the external authentication server.

[Enhanced Server Authentication]

Interacts with the enhanced server such as Authentication Manager. This authentication method only allows users registered on the enhanced server to use this machine.

[Main + Enhanced Server]

Select this option to enable login using the authentication function of the MFP in case a trouble occurs on the enhanced server such as Authentication Manager.

[Default Authentication Method]

Select your preferred authentication method if [Main + External Server] or [Main + Enhanced Server] is selected with [Authentication Method].

• If [Authentication Method] is set to [Main + External Server], [External Server Authentication] is specified by default.

• If [Authentication Method] is set to [Main + Enhanced Server], [Enhanced Server Authentication] is specified by default.

[Overwrite User Info]

Configure this option if [External Server Authentication] or [Main + External Server] is selected with [Authentication Method].

When the external server authentication is used, authenticated user information is also managed on this machine.

If the number of users who have executed the external server authentication reaches the maximum number of users this machine can manage, authentication of any new users will not be permitted. Select whether to allow the user to overwrite registered user information for that case.

If you select [Allow], the oldest authenticated user information is erased and the new user is registered.

If [Enhanced Server Authentication] or [Main + Enhanced Server] is selected with [Authentication Method], [Allow] is specified forcibly.

[Restrict] is specified by default.

[Temporarily Save Authentication Info.]

Select whether to temporarily save authentication information in the main unit against a case where an external authentication server shuts down. [OFF] is specified by default.

To temporarily save authentication information, specify the timing to reconnect to the authentication server and the validity period of the data to be saved temporarily.

• [Reconnection Settings]: Specify the timing to reconnect to the authentication server. Selecting [Reconnect for every login] connects to the authentication server at the time authentication is carried out on this machine. If the authentication server is in the shutdown state at the time authentication is carried out on this machine, first confirm that the authentication server is down, and use the temporarily saved authentication information to log in to this machine. Selecting [Set Reconnect Interval] connects to the authentication server at the time specified in [Reconnection Time], and check the status of the authentication server. If the authentication server is in the shutdown state, use the authentication information temporarily saved in the main unit to log in. [Set Reconnect Interval] is specified by default.

• [Expiration Date Settings]: Select whether to set the validity period to the temporarily saved authentication information. To set the validity period, enter the desired value. [Disable] is specified by default.

[Restrict]

Usage of this machine by public users is prohibited.

[ON (With Login)]

Permits that public users use this machine. When a public user uses this machine, tap [Public User Access] on the Login screen to log in to this machine.

[ON (Without Login)]

Permits that public users use this machine. A public user can use this machine without logging in to this machine.

Using this option eliminates the login operations, providing advantages in an environment with a large number of public users.

[Account Name & Password]

Enter the account name and password to log in. When cusing user authentication and account track in combination, the setting cannot be changed from [Account Name & Password].

[Password Only]

Enter only the password to log in.

[Synchronize]

Select this option when users and accounts are in a one-on-one relation. When registering a user, just specify the department of a user, and login as the user also results in login as the associated account.

[Do Not Synchronize]

Select this option for users who join more than one account. To log in to this machine, users need to specify an account after entering the user name.

[Synchronize by User]

Have users select whether or not to synchronize user authentication and account track.

[Skip Job]

Stops the running job, and then starts the next job.

[Stop Job]

Stops all jobs.

[Delete Job]

Deletes the active job.

[ON]/[OFF]

Select whether to verify authentication information (ticket) obtained from Active Directory on this machine when logging in to this machine while Active Directory is used as the authentication server.

[OFF] is specified by default.

[Host Name]

Enter the host name of this machine (using up to 253 characters).

[Domain Name]

Enter the domain name of Active Directory (using up to 64 characters).

[Account Name]

Enter the administrator's account name of the Active Directory domain (using up to 64 characters).

[Password]

Enter the administrator's password of the Active Directory domain (using up to 64 characters).

[Timeout]

Change the time-out time of domain joining processing if necessary.

[30] sec. is specified by default.

[ON]/[OFF]

Select whether to use NFC in order to establish a pairing with an Android terminal.

This setting is synchronized with [Utility] - [Administrator Settings] - [System Connection] - [Mobile Connection Settings] - [Simple Connection Setting] - [Enable NFC].

[OFF] is specified by default.

[NFC Authentication Setting]

Select whether to use NFC authentication.

[OFF] is specified by default.

[ON]/[OFF]

Select whether to use Bluetooth LE in order to establish a pairing with an iOS terminal.

This setting is synchronized with [Utility] - [Administrator Settings] - [System Connection] - [Mobile Connection Settings] - [Simple Connection Setting] - [Enable Bluetooth LE].

[OFF] is specified by default.

[Bluetooth LE Authentication Setting]

Select whether to use Bluetooth LE authentication.

[OFF] is specified by default.

[ON]/[OFF]

Specify whether to enable authentication by the LDAP server using the card ID registered on authentication cards.

To enable authentication, register the LDAP server. If you group two servers, you can switch to another server to perform authentication when a server shuts down. For details, refer to "Newly registering and editing authentication server" shown below.

[OFF] is specified by default.

[Server Name]

Enter the name of your authentication server group (using up to 32 characters).

Assign a name that helps you easily identify the authentication server group.

[1st Server Registration]

Register the primary server in the server group.

For details, refer to "Settings of [1st Server Registration]" shown below.

[2nd Server Setting]

Configure a setting to connect to the secondary server when the machine cannot be connected to the primary server.

For details, refer to "Settings of [2nd Server Setting]" shown below.

[Round Robin function]

Select whether to alternately connect to the primary and secondary servers.

If you select [Enable], you can alternately connect the primary and secondary servers to distribute the server load.

[Disable] is specified by default.

[External Server Authentication]

Select the external authentication server group used to associate the LDAP-IC card authentication.

When LDAP-IC card authentication succeeds, user authentication information is registered on the machine to manage users on the machine. This authentication information includes the user name and external authentication server name. The external authentication server name selected here is registered on the machine together with the user name.

[Card Information Registration Settings]

When authentication is performed on the machine using an IC card not registered in the LDAP server, select whether to register the IC card in the LDAP server.

If [ON] is selected, configure the following settings.

• [1st Server]: Tap [User Name Attribute], then specify the attribute such as "uid" that is to be searched as the user name.

• [2nd Server]: Tap [Same as 1st Server] to use the same setting as for the primary server. To use a setting different from that of the primary server, tap [User Name Attribute], then specify the attribute that is to be searched as the user name.

• [Sequential Server Card Registration]: Specify the server to register card information in. If you select [Primary Server for Card Registration], card information is registered in the server with authentication succeeded among the primary and secondary servers.

[OFF] is specified by default.

[Card Info. Character Type During Search]

Select the search string conversion method to search for the card ID via the LDAP server.

When the target card attribute information on the server is unified into upper and lower case letters, in some cases, you can convert the character type of the search string and subsequently reduce the search speed.

• [Uppercase/Lowercase]: Converts the card ID into upper or lower case letters to carry out a search.

• [Uppercase Letters]: Converts the card ID to uppercase letters to carry out a search.

• [Lowercase Letters]: Converts the card ID to lowercase letters to carry out a search.

[Uppercase/Lowercase] is specified by default.

[Setting Up LDAP]

Register the LDAP server to be used for authenticating the user ID of the IC card.

Tap [Check Connection] to try connecting to the LDAP server using the entered information and check if the information registered is correct.

Tap [Reset All Settings] to reset all the information entered.

[User Name Acquisition]

Select how to obtain the user name when logging in to this machine.

• [Use Card ID]: Select this option when only IC card information is registered on the server. Uses the card ID in the IC card as the user name.

• [Acquiring]: Select this option when user information other than IC card information is registered on the server. Uses the user name obtained from the server. Enter the attribute to be searched as the user name ("uid") at [User Name Attribute].

[Use Card ID] is specified by default.

[Timeout]

If necessary, change the time-out time to limit a communication with the LDAP server.

[60 sec.] is specified by default.

[Search Attribute]

Enter attributes for the place in which you have entered IC card information (using up to 64 characters).

The attribute must start with an alphabet character.

[uid] is specified by default.

[Search Directory Service]

If you select [Active Directory], you can limit a search target for authentication to users. However, when a search target for authentication is limited to users, search target identification processing occurs on the server side, so the authentication time may be delayed. This function is available when the authentication server is set to Active Directory (Windows Server 2008 or later).

[Other] is specified by default.

[Server Address]

Enter the LDAP server address.

Use one of the following formats.

• Example of host name entry: "host.example.com"

• Example of IP address (IPv4) entry: "192.168.1.1"

• Example of IP address (IPv6) entry: "fe80::220:6bff:fe10:2f16"

[Search Base 1] to [Search Base 3]

Specify the starting point to search for a user to be authenticated.

• [Search Base]: Specify the starting point to search for a target (using up to 255 characters).
  Example of entry: "cn=users,dc=example,dc=com"

• [Search Range]: Select a tree search range. [Full Tree] is specified by default.
  Selecting [Full Tree] makes a search, including the tree structure under the entered starting point. Selecting [Next hierarchy only] searches for only one level directly beneath the entered starting point. In this case, the level at the starting point is not included as a search target.

[SSL Setting]

Specify whether or not to use SSL for communication with the LDAP server.

[OFF] is specified by default.

[Port Number]

If necessary, change the LDAP server port number.

In normal circumstances, you can use the original port number.

[389] is specified by default.

[Port Number (SSL)]

If necessary, change the SSL communication port number.

In normal circumstances, you can use the original port number.

[636] is specified by default.

[Certificate Verification Level Settings]

To validate the certificate during SSL communication, select items to be verified.

• [Expiration Date]: Confirm whether the certificate is within the validity period. [Confirm] is specified by default.

• [Key Usage]: Confirm whether the certificate is used according to the intended purpose approved by the certificate issuer. [Do Not Confirm] is specified by default.

• [Chain]: Confirm whether there is a problem in the certificate chain (certificate path). The chain is validated by referencing the external certificates managed on this machine. [Do Not Confirm] is specified by default.

• [Expiration Date Confirmation]: Confirm whether the certificate has expired. [Do Not Confirm] is specified by default.

• [CN]: Confirm whether CN (Common Name) of the certificate matches the server address. [Do Not Confirm] is specified by default.

[Authentication Type]

Select the authentication method to log in to the LDAP server.

Select one appropriate for the authentication method used for your LDAP server.

• [Simple]

• [Digest-MD5]

• [GSS-SPNEGO]

• [NTLM v1]

• [NTLM v2]

[Simple] is specified by default.

[Referral Setting]

Select whether to use the referral function, if necessary.

Make an appropriate choice to fit the LDAP server environment.

[ON] is specified by default.

[Login Name]

Log in to the LDAP server, and enter the user name to search for a user (using up to 64 characters).

In this step, enter the user (name) that belongs to a specific administrator group on the LDAP server.

[Password]

Enter the password of the user you entered into [Login Name] (using up to 64 characters).

[Domain Name]

Enter the domain name to log in to the LDAP server (using up to 64 characters).

If [GSS-SPNEGO] is selected for [Authentication Type], enter the domain name of Active Directory.

[ON]/[OFF]

Select whether to use the secondary server.

[OFF] is specified by default.

[Reconnection Set.]

Configure a setting to connect to the secondary server when the machine cannot be connected to the primary server. When the round-robin function is enabled, this setting can also be used to connect to the primary server when the machine cannot be connected to the secondary server.

• [Reconnect for every login]: Connects to the primary server each time authentication is carried out on this machine. If the primary server is shutting down, this machine is connected to the secondary server.

• [Set Reconnect Interval]: Connects to the secondary server when the primary server is shutting down at the time the machine is being authenticated. After this, this machine is connected to the secondary server when machine authentication is occurring until the time specified in [Reconnection Time] lapses. After the time specified in [Reconnection Time] has lapsed, this machine is reconnected to the primary server when machine authentication is occurring.

[Set Reconnect Interval] is specified by default.

[2nd Server Reg.]

Register the secondary server.

For details, refer to "Settings of [1st Server Registration]" shown above.

To extract the primary server setting and configure the secondary server setting, tap [Retrieve from 1st Server].

[ID & Print]

Select whether to handle jobs normally printed from the printer driver as ID & Print jobs.

• [ON]: Jobs that are normally printed are handled as ID & Print jobs.

• [OFF]: Only jobs for which ID & Print is set are handled as print jobs.

[OFF] is specified by default.

[Public User]

Select the process performed when a public user job or a job without user authentication information is received.

• [Print Immediately]: Prints the job without saving it in the ID & Print User Box.

• [Save]: Saves the job in the ID & Print User Box.

[Print Immediately] is specified by default.

[Print All Jobs]

One successful authentication session allows the user to print all jobs.

[Print Each Job]

One successful authentication session allows the user to print a single job.

[Change to Basic Screen after ID & Print]

Select whether to simultaneously perform ID & Print and the authentication to log in to this machine.

If [ON] is selected, [Login after Print] is displayed in [ID & Print] on the login page.

[Restrict] is specified by default.

[Auth. Operation Setting when print Documents are Stored]

Select the default value for the operation that is performed after authentication in the login window.

• [Logout after Print]: Prints ID & Print jobs. The user is not logged in to this machine.

• [Login without Print]: The user is logged in to this machine. The ID & Print job is not executed.

• [Login after Print]: Prints the ID & Print job, and the user is logged in to this machine. This setting is available when [ON] is selected for [Change to Basic Screen after ID & Print].

[Logout after Print] is specified by default.

[User Name]

Enter the user name to log in to this machine (using up to 64 characters).

You cannot configure the same user name as an the one which has already been assigned to a registered user. Once a user name is registered, it cannot be changed.

[Password]

Enter the password to log in to this machine (using up to 64 characters).

[E-Mail Address]

Enter the user's E-mail address (using up to 320 characters) if necessary.

If the E-mail address is registered, the Scan to Me function and the Scan to URL function are available.

[Max. Allowance Set]

Set the maximum number of pages that the user can print.

• [Total Allowance]: Specify the total number of pages that can be printed. To omit setting of the maximum, select [No Limit].

Tap [All Users] to apply the maximum setting to all users.

[No Limit] is specified by default.

[Register Auth. Info.]

If an Authentication Unit is used to adopt the user authentication, tap [Edit] to register authentication information.

To delete authentication information, tap [Delete].

[Function Permission/Authority] - [Function permission]

Restrict functions available to users.

Specify whether to restrict the following functions, respectively:

• [Copy]: [Allow] is specified by default.

• [Scan]: [Full Color/Black] is specified by default.

• [Fax]: [Full Color/Black] is specified by default.

• [Print]: [Allow] is specified by default.

• [User Box]: [Allow] is specified by default.

• [Print Scan/Fax TX]: [Allow] is specified by default.

• [Save to External Memory]: [Restrict] is specified by default.

• [External Memory Document Scan]: [Restrict] is specified by default.

• [Manual Destination Input]: [Allow] is specified by default.

• [Biometric/IC Card Info. Registration]: [Restrict] is specified by default.

• [Web Browser]: [Allow] is specified by default.

Tap [All Users] to apply the Function Permission to all users.

[Function Permission/Authority] - [Permission Setting]

Assigns administrator privileges to the user.

Specify whether to assign each of the following privileges to the user.

• [Administrative Rights]: [Not Allowed] is specified by default.

• [User Box Administrator Rights]: [Not Allowed] is specified by default.

Tap [All Users] to apply the assignment of privileges to all users.

This option is available when [Allow] is selected in [Administrator Settings] - [User Authentication/Account Track] - [User Authentication Settings] - [Administrative Settings] - [Login Allowed with Administrative Rights].

[Pause]

Disable registered users temporarily if necessary. If [Stop Job] is set, the users cannot log in to the MFP any longer.

Tap [All Users] to temporarily suspend the use of this machine by any user.

[Continue Job] is specified by default.

[Custom Pattern Function]

Specify the display pattern of function keys in the Copy, Scan/Fax and User Box modes for each user.

• [Full Functions]: Displays all function keys.

• [Standard Functions] (Not displayed in some areas): Displays commonly used function keys.

• [Basic Functions]: Displays the more basic function keys than [Standard Functions].

• [Disable]: User-specific pattern is not configured. The settings of this machines are applied.

You can set this option by selecting [Allow] in [Administrator Settings] - [System Settings] - [Custom Display Settings] - [User/Admin Function Permissions].

[Disable] is specified by default.

[Synchronize Account Track]

Specify whether to synchronize user authentication and account track when both user authentication and account track are implemented.

Tap [All Users] to apply the setting for synchronizing user authentication and account track to all users.

You can set this option by selecting [Synchronize by User] in [Administrator Settings] - [User Authentication/Account Track] - [General Settings] - [Synchronize User Authentication & Account Track].

[Account Name]

If user authentication and account track are implemented and if they are synchronized with each other, select the account to which the user belongs.

Account names must be registered in advance.

[User Name]

Enter the user name to log in to this machine (using up to 64 characters).

You cannot configure the same user name as an the one which has already been assigned to a registered user. Once a user name is registered, it cannot be changed.

[Password]

Enter the password to log in to this machine (using up to 64 characters).

[E-Mail Address]

Enter the user's E-mail address (using up to 320 characters) if necessary.

If the E-mail address is registered, the Scan to Me function and the Scan to URL function are available.

[Max. Allowance Set]

Set the maximum number of pages that the user can print.

• [Total Allowance]: Specify the total number of pages that can be printed. To omit setting of the maximum, select [No Limit].

Tap [All Users] to apply the maximum setting to all users.

[No Limit] is specified by default.

[Register Auth. Info.]

If an Authentication Unit is used to adopt the user authentication, tap [Edit] to register authentication information.

To delete authentication information, tap [Delete].

[Function Permission/Authority] - [Function permission]

Restrict functions available to users.

Specify whether to restrict the following functions, respectively:

• [Copy]: [Allow] is specified by default.

• [Scan]: [Full Color/Black] is specified by default.

• [Fax]: [Full Color/Black] is specified by default.

• [Print]: [Allow] is specified by default.

• [User Box]: [Allow] is specified by default.

• [Print Scan/Fax TX]: [Allow] is specified by default.

• [Save to External Memory]: [Restrict] is specified by default.

• [External Memory Document Scan]: [Restrict] is specified by default.

• [Manual Destination Input]: [Allow] is specified by default.

• [Biometric/IC Card Info. Registration]: [Restrict] is specified by default.

• [Web Browser]: [Allow] is specified by default.

Tap [All Users] to apply the Function Permission to all users.

[Function Permission/Authority] - [Permission Setting]

Assigns administrator privileges to the user.

Specify whether to assign each of the following privileges to the user.

• [Administrative Rights]: [Not Allowed] is specified by default.

• [User Box Administrator Rights]: [Not Allowed] is specified by default.

Tap [All Users] to apply the assignment of privileges to all users.

This option is available when [Allow] is selected in [Administrator Settings] - [User Authentication/Account Track] - [User Authentication Settings] - [Administrative Settings] - [Login Allowed with Administrative Rights].

[Pause]

Disable registered users temporarily if necessary. If [Stop Job] is set, the users cannot log in to the MFP any longer.

Tap [All Users] to temporarily suspend the use of this machine by any user.

[Continue Job] is specified by default.

[Custom Pattern Function]

Specify the display pattern of function keys in the Copy, Scan/Fax and User Box modes for each user.

• [Full Functions]: Displays all function keys.

• [Standard Functions] (Not displayed in some areas): Displays commonly used function keys.

• [Basic Functions]: Displays the more basic function keys than [Standard Functions].

• [Disable]: User-specific pattern is not configured. The settings of this machines are applied.

You can set this option by selecting [Allow] in [Administrator Settings] - [System Settings] - [Custom Display Settings] - [User/Admin Function Permissions].

[Disable] is specified by default.

[Synchronize Account Track]

Specify whether to synchronize user authentication and account track when both user authentication and account track are implemented.

Tap [All Users] to apply the setting for synchronizing user authentication and account track to all users.

You can set this option by selecting [Synchronize by User] in [Administrator Settings] - [User Authentication/Account Track] - [General Settings] - [Synchronize User Authentication & Account Track].

[Account Name]

If user authentication and account track are implemented and if they are synchronized with each other, select the account to which the user belongs.

Account names must be registered in advance.

[Counter Details]

Shows the counter for the selected user. You can check the number of pages used for each function.

Tap [Eco Info] to display 2-sided printing, page combination, and other information related to the user, and check how effectively toner and paper are being saved.

Tap [Clear Counter] to clear the user's counter.

[Reset All Counters]

Resets counters for all users.

[Account Name]

Enter the account name used for logging in to this machine (using up to eight characters).

[Password]

Enter the password to log in to this machine (using up to 64 characters).

[Max. Allowance Set]

Restricts the number of pages each account can print.

• [Total Allowance]: Specify the total number of pages that can be printed. To omit setting of the maximum, select [No Limit].

Tap [All Accounts] to apply the maximum setting to all accounts.

[No Limit] is specified by default.

[Function Permission]

Restrict functions available to users.

Specify whether to restrict the following functions, respectively:

• [Copy]: [Allow] is specified by default.

• [Scan]: [Full Color/Black] is specified by default.

• [Fax]: [Full Color/Black] is specified by default.

• [Print]: [Allow] is specified by default.

• [Print Scan/Fax TX]: [Allow] is specified by default.

Tap [All Accounts] to apply function permission setting to all accounts.

[Pause]

Disable registered accounts temporarily if necessary. If [Stop Job] is set, the users cannot log in to the MFP any longer.

Tap [All Accounts] to temporarily suspend the use of this machine by any account.

[Continue Job] is specified by default.

[Custom Pattern Function]

Specify the display pattern of function keys in the Copy, Scan/Fax and User Box modes for each account.

• [Full Functions]: Displays all function keys.

• [Standard Functions] (Not displayed in some areas): Displays commonly used function keys.

• [Basic Functions]: Displays the more basic function keys than [Standard Functions].

• [Disable]: Account-specific pattern is not configured. The settings of this machines are applied.

You can set this option by selecting [Allow] in [Administrator Settings] - [System Settings] - [Custom Display Settings] - [User/Admin Function Permissions].

[Disable] is specified by default.

[Account Name]

Enter the account name used for logging in to this machine (using up to eight characters).

[Password]

Enter the password to log in to this machine (using up to 64 characters).

[Max. Allowance Set]

Restricts the number of pages each account can print.

• [Total Allowance]: Specify the total number of pages that can be printed. To omit setting of the maximum, select [No Limit].

Tap [All Accounts] to apply the maximum setting to all accounts.

[No Limit] is specified by default.

[Function Permission]

Restrict functions available to users.

Specify whether to restrict the following functions, respectively:

• [Copy]: [Allow] is specified by default.

• [Scan]: [Full Color/Black] is specified by default.

• [Fax]: [Full Color/Black] is specified by default.

• [Print]: [Allow] is specified by default.

• [Print Scan/Fax TX]: [Allow] is specified by default.

Tap [All Accounts] to apply function permission setting to all accounts.

[Pause]

Disable registered accounts temporarily if necessary. If [Stop Job] is set, the users cannot log in to the MFP any longer.

Tap [All Accounts] to temporarily suspend the use of this machine by any account.

[Continue Job] is specified by default.

[Custom Pattern Function]

Specify the display pattern of function keys in the Copy, Scan/Fax and User Box modes for each account.

• [Full Functions]: Displays all function keys.

• [Standard Functions] (Not displayed in some areas): Displays commonly used function keys.

• [Basic Functions]: Displays the more basic function keys than [Standard Functions].

• [Disable]: Account-specific pattern is not configured. The settings of this machines are applied.

You can set this option by selecting [Allow] in [Administrator Settings] - [System Settings] - [Custom Display Settings] - [User/Admin Function Permissions].

[Disable] is specified by default.

[Counter Details]

Shows the counter for the selected account. You can check the number of pages used for each function.

Tap [Eco Info] to display 2-sided printing, page combination, and other information to the user, and check how effectively toner and paper are being saved.

Tap [Clear Counter] to clear the account's counter.

[Reset All Counters]

Resets counters for all accounts.

[TRAP Setting]

• [Allow]: Only black and white printing is allowed. Print jobs are counted as public user jobs.

• [Restrict]: Printing is restricted. Canceling [Restrict] allows everybody to perform printing. Select [Restrict] to control user access and ensure security.

[Restrict] is specified by default.

[IP Filtering (Permit Access)]

If [Allow] is selected in [TRAP Setting], specify a computer that allows an access to this machine using the IP address.

[Enable]/[Disable]

Select whether to specify an IP address that allows access to this machine.

[Disable] is specified by default.

[Set 1] to [Set 5]

Enter the range of IP addresses that allow access using the following format.

• Entry example: "192.168.1.1 - 192.168.1.10"

• To allow access from a single IP address, you can only enter the address in one side of the range.

[Server Name]

Enter the name of your authentication server group (using up to 32 characters).

Assign a name that helps you easily identify the authentication server group.

[1st Server Registration]

Register the primary server in the server group.

For details, refer to "Settings of [1st Server Registration]" shown below.

[2nd Server Setting]

Configure a setting to connect to the secondary server when the machine cannot be connected to the primary server.

For details, refer to "Settings of [2nd Server Setting]" shown below.

[Round Robin function]

Select whether to alternately connect to the primary and secondary servers.

If you select [Enable], you can alternately connect the primary and secondary servers to distribute the server load.

[Disable] is specified by default.

[Active Directory]

Register server information when Active Directory is used as the authentication server.

• [Default Domain Name]: Enter the default domain name of your Active Directory (using up to 64 characters).

• [Timeout]: Change the timeout interval for communication with Active Directory, if required.
  [60 sec.] is specified by default.

[NTLM v1]

Register server information when NTLM v1 is used as the authentication server.

• [Default Domain Name]: Enter the default domain name of your authentication server (using up to 64 characters). The default domain name must be uppercase letters.

[NTLM v2]

Register server information when NTLM v2 is used as the authentication server.

• [Default Domain Name]: Enter the default domain name of your authentication server (using up to 64 characters). The default domain name must be uppercase letters.

[LDAP]

Register server information when LDAP is used as the authentication server.

• [Server Address]: Enter your LDAP server address.

• [Search Base 1] to [Search Base 3]: Specify the starting point and range to search a user to be authenticated.
  [Search Base]: Specify the starting point to search for a target (using up to 255 characters).
  Example of entry: "cn=users,dc=example,dc=com"
  [Search Range]: Select a tree search range. [Full Tree] is specified by default. Selecting [Full Tree] makes a search, including the tree structure under the entered starting point. Selecting [Next hierarchy only] searches for only one level directly beneath the entered starting point. In this case, the level at the starting point is not included as a search target.

• [SSL Setting]: Specify whether to use SSL for communications. [OFF] is specified by default.

• [Port No.]: If necessary, change the port number. [389] is specified by default.

• [Timeout]: Change the timeout interval for communication with the LDAP server, if required. [60] sec. is specified by default.

• [Authentication Type]: Select the authentication method to log in to the LDAP server. Select one appropriate for the authentication method used for your LDAP server. [Simple] is specified by default.

• [Search Attribute(s)]: Enter the search attribute used in user account search (using up to 64 characters). [uid] is specified by default.

• [Search Directory Service]: If you select [Active Directory], you can limit a search target for authentication to users. However, when a search target for authentication is limited to users, search target identification processing occurs on the server side, so the authentication time may be delayed. This function is available when the authentication server is set to Active Directory (Windows Server 2008 or later). [Other] is specified by default.

• [Search Attributes Authentication]: Specify whether to have DN (Distinguished Name) generated automatically that is required for authentication by the LDAP server when [Simple] is selected for [Authentication Type]. Also, enter authentication information used for logging in to the LDAP server in order to search for the user ID. [No Limit] is specified by default.

[ON]/[OFF]

Select whether to use the secondary server.

[OFF] is specified by default.

[Reconnection Set.]

Configure a setting to connect to the secondary server when the machine cannot be connected to the primary server. When the round-robin function is enabled, this setting can also be used to connect to the primary server when the machine cannot be connected to the secondary server.

• [Reconnect for every login]: Connects to the primary server each time authentication is carried out on this machine. If the primary server is shutting down, this machine is connected to the secondary server.

• [Set Reconnect Interval]: Connects to the secondary server when the primary server is shutting down at the time the machine is being authenticated. After this, this machine is connected to the secondary server when machine authentication is occurring until the time specified in [Reconnection Time] lapses. After the time specified in [Reconnection Time] has lapsed, this machine is reconnected to the primary server when machine authentication is occurring.

[Set Reconnect Interval] is specified by default.

[2nd Server Reg.]

Register the secondary server.

For details, refer to "Settings of [1st Server Registration]".

[Create Group]

Register a reference allowed group.

In a reference allowed group, destinations and users can be registered, and such users can reference destinations registered in the same group.

• To register a group, select the registration number and tap [Edit].

• To check destinations or users registered in a group, tap [Details].

[Group Name]

Enter the name of the group (using up to 24 characters).

[Access Allowed Level]

To manage the address book by combining the reference allowed level and reference allowed group, select a reference allowed level of the reference allowed group.

[Level 0] is specified by default.

[Apply Levels/Groups to Destinations]

Select a registered destination from [Address Book], [Group], or [Program], and then configure either the reference allowed group or reference allowed level.

[Apply Group]

Assign a reference allowed group to the registered destination you have selected.

Before you can assign a reference allowed group, you need to register the reference allowed group in [Create Group].

[Apply Level]

Assign a reference allowed level to the registered destination you have selected.

[Level 0] is specified by default.

[Apply Levels/Groups to Users]

Select a registered user or public user and specify a reference allowed group or reference allowed level. You can combine reference allowed group and reference allowed level settings.

[Apply Group]

Assign a reference allowed group to the registered user you have selected.

Before you can assign a reference allowed group, you need to register the reference allowed group in [Create Group].

[Apply Level]

Assign a reference allowed level to the registered user you have selected.

[Level 0] is specified by default.

[Card Authentication]

To use this function, the optional Authentication Unit (IC card type) is required.

[IC Card type setting]

Select whether to permit a use for each IC card type.

• Specify the authentication destination in [Authentication Assignment Dest.]. You can select the authentication server group or MFP, which is specified in [LDAP-IC Card Authentication Setting], as the authentication destination. Also, you can specify up to three authentication destinations to search for their user information in parallel.
  [Authentication Assignment Dest.] is available when [External Server Authentication] or [Main + External Server] is selected in the [Authentication Method] of user authentication, and FeliCa, TypeA, MIFARE(PID), or NFC(HCE) is specified as the IC card type.
  The MFP can be specified as the authentication destination only when [Main + External Server] is selected in the [Authentication Method] of user authentication. For details on the [Authentication Method] of user authentication, refer to Here.

• When using [SSFC], you can register detailed information such as the company identification code or company code.

• When using [FCF], you can register the section code.

• When using [FCF (Campus)], you can register the campus identification code.

• When using [MIFARE(PID)], register detailed information such as the key code.

[IC Card Type]

The specified IC card type is displayed depending on the type of your loadable driver.

[Operation Settings]

Select how to log in to this machine.

• [Card Authentication]: Logs in simply by placing your IC card or NFC-compatible Android terminal on the authentication unit.

• [Card Authentication + Password]: Logs in by placing the IC card or NFC-compatible Android terminal on the authentication unit and entering the password.

[Card Authentication] is specified by default.

[Authentication Card ID Number]

Select whether to notify the counter, which collects the use status of this machine, of the authentication card ID.

[Ignore] is specified by default.

[Bio Authentication]

To use this function, the optional Authentication Unit (biometric type) is required.

[Beep Sound]

Select whether to give a "blip" sound when the finger vein pattern is scanned successfully.

[ON] is specified by default.

[Operation Settings]

Select how to log in to this machine.

• [1-to-many authentication]: A user simply needs to place his or her finger to log in.

• [1-to-1 authentication]: Enter the user name and position his or her finger to log in.

[1-to-many authentication] is specified by default.

[Card Authentication]

To use this function, the optional Authentication Unit (IC card type) is required.

[IC Card type setting]

Select whether to permit a use for each IC card type.

• Specify the authentication destination in [Authentication Assignment Dest.]. You can select the authentication server group or MFP, which is specified in [LDAP-IC Card Authentication Setting], as the authentication destination. Also, you can specify up to three authentication destinations to search for their user information in parallel.
  [Authentication Assignment Dest.] is available when [External Server Authentication] or [Main + External Server] is selected in the [Authentication Method] of user authentication, and FeliCa, TypeA, MIFARE(PID), or NFC(HCE) is specified as the IC card type.
  The MFP can be specified as the authentication destination only when [Main + External Server] is selected in the [Authentication Method] of user authentication. For details on the [Authentication Method] of user authentication, refer to Here.

• When using [SSFC], you can register detailed information such as the company identification code or company code.

• When using [FCF], you can register the section code.

• When using [FCF (Campus)], you can register the campus identification code.

• When using [MIFARE(PID)], register detailed information such as the key code.

[IC Card Type]

The specified IC card type is displayed depending on the type of your loadable driver.

[Operation Settings]

Select how to log in to this machine.

• [Card Authentication]: Logs in simply by placing your IC card or NFC-compatible Android terminal on the authentication unit.

• [Card Authentication + Password]: Logs in by placing the IC card or NFC-compatible Android terminal on the authentication unit and entering the password.

[Card Authentication] is specified by default.

[Authentication Card ID Number]

Select whether to notify the counter, which collects the use status of this machine, of the authentication card ID.

[Ignore] is specified by default.

[Bio Authentication]

To use this function, the optional Authentication Unit (biometric type) is required.

[Beep Sound]

Select whether to give a "blip" sound when the finger vein pattern is scanned successfully.

[ON] is specified by default.

[Operation Settings]

Select how to log in to this machine.

• [1-to-many authentication]: A user simply needs to place his or her finger to log in.

• [1-to-1 authentication]: Enter the user name and position his or her finger to log in.

[1-to-many authentication] is specified by default.

[Authentication Setting]

Select whether to allow authentication that is based only on the user name (without a password) when the printer driver is used for printing in an environment where user authentication is employed.

To permit the quick authentication, the login user name for this machine for MFP authentication, external server authentication, and enhanced server authentication must match the Windows login ID.

[Restrict] is specified by default.

[Register Authentication Server]

When external server authentication is implemented, register the LDAP server to check user names.

If you group two servers, you can switch to another server to perform authentication when a server shuts down.

For details, refer to "Newly registering and editing authentication server" shown below.

[Server Name]

Enter the name of your authentication server group (using up to 32 characters).

Assign a name that helps you easily identify the authentication server group.

[1st Server Registration]

Register the primary server in the server group.

For details, refer to "Settings of [1st Server Registration]" shown below.

[2nd Server Setting]

Configure a setting to connect to the secondary server when the machine cannot be connected to the primary server.

For details, refer to "Settings of [2nd Server Setting]" shown below.

[Round Robin function]

Select whether to alternately connect to the primary and secondary servers.

If you select [Enable], you can alternately connect the primary and secondary servers to distribute the server load.

[Disable] is specified by default.

[External Server Authentication]

Select the external authentication server group used to associate the quick authentication.

When quick authentication succeeds, user authentication information is registered on the machine to manage users on the machine. This authentication information includes the user name and external authentication server name. The external authentication server name selected here is registered on the machine together with the user name.

[Timeout]

If necessary, change the time-out time to limit a communication with the LDAP server.

[60 sec.] is specified by default.

[Search Attribute]

Enter the search attribute to be used for search of a user using the LDAP server (using up to 64 characters).

The attribute must start with an alphabet character.

[uid] is specified by default.

[Search Directory Service]

If you select [Active Directory], you can limit a search target for authentication to users. However, when a search target for authentication is limited to users, search target identification processing occurs on the server side, so the authentication time may be delayed. This function is available when the authentication server is set to Active Directory (Windows Server 2008 or later).

[Other] is specified by default.

[Server Address]

Enter the LDAP server address.

Use one of the following formats.

• Example of host name entry: "host.example.com"

• Example of IP address (IPv4) entry: "192.168.1.1"

• Example of IP address (IPv6) entry: "fe80::220:6bff:fe10:2f16"

[Search Base 1] to [Search Base 3]

Specify the starting point to search for a user to be authenticated.

• [Search Base]: Specify the starting point to search for a target (using up to 255 characters).
  Example of entry: "cn=users,dc=example,dc=com"

• [Search Range]: Select a tree search range. [Full Tree] is specified by default.
  Selecting [Full Tree] makes a search, including the tree structure under the entered starting point. Selecting [Next hierarchy only] searches for only one level directly beneath the entered starting point. In this case, the level at the starting point is not included as a search target.

[SSL Setting]

Specify whether or not to use SSL for communication with the LDAP server.

[OFF] is specified by default.

[Port Number]

If necessary, change the LDAP server port number.

In normal circumstances, you can use the original port number.

[389] is specified by default.

[Port Number (SSL)]

If necessary, change the SSL communication port number.

In normal circumstances, you can use the original port number.

[636] is specified by default.

[Certificate Verification Level Settings]

To validate the certificate during SSL communication, select items to be verified.

• [Expiration Date]: Confirm whether the certificate is within the validity period. [Confirm] is specified by default.

• [Key Usage]: Confirm whether the certificate is used according to the intended purpose approved by the certificate issuer. [Do Not Confirm] is specified by default.

• [Chain]: Confirm whether there is a problem in the certificate chain (certificate path). The chain is validated by referencing the external certificates managed on this machine. [Do Not Confirm] is specified by default.

• [Expiration Date Confirmation]: Confirm whether the certificate has expired. [Do Not Confirm] is specified by default.

• [CN]: Confirm whether CN (Common Name) of the certificate matches the server address. [Do Not Confirm] is specified by default.

[Authentication Type]

Select the authentication method to log in to the LDAP server.

Select one appropriate for the authentication method used for your LDAP server.

• [Simple]

• [Digest-MD5]

• [GSS-SPNEGO]

• [NTLM v1]

• [NTLM v2]

[Simple] is specified by default.

[Referral Setting]

Select whether to use the referral function, if necessary.

Make an appropriate choice to fit the LDAP server environment.

[ON] is specified by default.

[Login Name]

Log in to the LDAP server, and enter the user name to search for a user (using up to 64 characters).

In this step, enter the user (name) that belongs to a specific administrator group on the LDAP server.

[Password]

Enter the password of the user you entered into [Login Name] (using up to 64 characters).

[Domain Name]

Enter the domain name to log in to the LDAP server (using up to 64 characters).

If [GSS-SPNEGO] is selected for [Authentication Type], enter the domain name of Active Directory.

[Check Connection]

Select this option to try connecting to the LDAP server using the entered information and check if the information registered is correct.

[Reset All Settings]

Tap this button to reset all the contents you entered.

[ON]/[OFF]

Select whether to use the secondary server.

[OFF] is specified by default.

[Reconnection Set.]

Configure a setting to connect to the secondary server when the machine cannot be connected to the primary server. When the round-robin function is enabled, this setting can also be used to connect to the primary server when the machine cannot be connected to the secondary server.

• [Reconnect for every login]: Connects to the primary server each time authentication is carried out on this machine. If the primary server is shutting down, this machine is connected to the secondary server.

• [Set Reconnect Interval]: Connects to the secondary server when the primary server is shutting down at the time the machine is being authenticated. After this, this machine is connected to the secondary server when machine authentication is occurring until the time specified in [Reconnection Time] lapses. After the time specified in [Reconnection Time] has lapsed, this machine is reconnected to the primary server when machine authentication is occurring.

[Set Reconnect Interval] is specified by default.

[2nd Server Reg.]

Register the secondary server.

For details, refer to "Settings of [1st Server Registration]".

To extract the primary server setting and configure the secondary server setting, tap [Retrieve from 1st Server].

[Domain Login Setting]

Configure settings to join services of this machine in a domain.

Joining services of this machine in the domain allows the user to use them if authenticated once by Active Directory.

[ON]/[OFF]

Select whether to use singe-sign on.

Enter the host name, domain name, account name, and password, then tap [OK] to execute domain joining processing.

[OFF] is specified by default.

[Host Name]

Enter the host name of this machine (using up to 253 characters).

Enter the host name you specified in [Administrator Settings] - [Network Settings] - [TCP/IP Settings] - [DNS Host].

[Domain Name]

Enter the domain name of Active Directory (using up to 64 characters).

[Account Name]

Enter the administrator's account name of the Active Directory domain (using up to 64 characters).

[Password]

Enter the administrator's password of the Active Directory domain (using up to 64 characters).

[TX Timeout]

Change the time-out time of domain joining processing if necessary.

[30] is specified by default.

[Applications and Settings]

Displays a list of services of this machine that join the Active Directory domain.

When this machine joins the Active Directory domain, [PRINTER] appears.

[Auto Log Out Time]

When the user uses services of this machine in the Active Directory domain, change the time to hold the user's authentication information on this machine.

Since the user can reuse authentication information while it is held on this machine, they can use the services of this machine without performing authentication again.

[1 Hour] is specified by default.