Skip to content

Choose your language

  • No results

Choose your login

  • No results
Support

How can we help?

Lightbulb icon
Lightbulb icon

Here’s your answer

Sources:

Lightbulb icon

Oops!

We currently don’t have an answer for this and our teams are working on resolving the issue. If you still need help,
User reading a resource

Popular resources

Help center

FAQs
Conversation bubbles

Contact us

Search

Configure web SSO

This page applies to:

Configuring SSO in PaperCut NG/MF is easy, but you must work through the preparation steps above, or you might not be able to log in to PaperCut NG/MF!

  1. Select Options > Advanced. The Advanced page is displayed.

  2. In the Web Single Sign-on (SSO) area, select the Enable Single sign-on check box to enable SSO. Additional configuration items are displayed.

  3. Select the SSO method:

    • Integrated Windows Authentication

    • WebAuth

  4. If you select WebAuth, complete the following fields:

    • WebAuth HTTP header key—the WebAuth HTTP header name.

    • Allowed WebAuth IP addresses—a comma-separated list of whitelisted IP addresses.

  5. Specify the SSO behavior you want for the user web interface and mobile client, Admin web interface, and other interfaces:

    1. Standard (username and password)—don’t use SSO and show the PaperCut NG/MF login screen.

    2. SSO with confirmation page—use SSO and present a confirmation page at login.

    3. SSO with direct access—use SSO and directly log in the user with no confirmation page.

  6. If you want to show a Switch User link on the confirmation page, select the Show “Switch User” link on confirmation page check box.

  7. In On logout, direct user to URL, enter a URL to go to on logout. A typical example would be the URL for your intranet portal.

Advanced configuration

You can set advanced config keys to fine tune SSO behavior. For more information, see Using the Advanced Config Editor .

  1. Some installations want to enable SSO for web users, but not for users of the mobile client and mobile release apps. To disable SSO for mobile users, set the advanced config key: auth.web-login.sso-enable.mobile-user to N.

  2. By default, Windows SSO does not authenticate users belonging to the “Guest” group. You can change this behavior by setting the advanced config key auth.web-login.sso-allow-guest to Y.

Post installation testing

After enabling SSO, perform the following tests to ensure that users can successfully access the PaperCut interface.

  1. Verify that you can still log in to the Admin web interface.

  2. Verify that a user without admin rights can still access their user web pages.

  3. If in use, verify that a user with the appropriate admin rights can still access other interfaces, such as Release Station or Web Cashier.

  4. Try logging in from other computers in the domain.

  5. Try logging in from different browsers supported in your organization.

  6. If using IWA, try logging in from a non-windows client or a PC outside the domain. Verify you can still log in after providing your Windows credentials.

Comments