Configure Xerox Secure Access Unified ID System Authentication Settings

When Xerox Secure Access authentication is configured, users present a pre-programmed identification card to a card reader at the control panel. The printer compares the user credentials to the information stored on the Xerox Secure Access server. To use Xerox Secure Access, purchase and install the Xerox Secure Access Unified ID System.

Before you begin:

• Install the Xerox Secure Access authentication server software, then configure user accounts. For details, refer to the Xerox Secure Access Unified ID System documentation.

• Enable the Authentication and Accounting Configuration Web service. For details, refer to HTTP.

• Format and configure identification cards.

• Ensure that USB ports are enabled. For details, refer to USB Port Management.

• Connect your card reader to the USB port.

The Login Methods page in the Embedded Web Server provides links to authentication and personalization configuration settings.

1. Access the Embedded Web Server and log in to the Embedded Web Server as a System Administrator.

2. In the Embedded Web Server, click Properties→Login/ Permissions/ Accounting→Login Methods.

3. Set the login method to Xerox Secure Access - Unified ID System. For details, refer to Set the Login Method for the Control Panel.

4. In the Configuration Settings table, configure options for Xerox Secure Access Unified ID System authentication:

   • To configure the Xerox Secure Access server, for Xerox Secure Access Setup, click Edit. For details, refer to Configuring Xerox Secure Access below.

   • To enable the Xerox Secure Access Web service, for Web Service Enablement, click Edit. For details, refer to HTTP.

   • To customize the title and instruction text that appears on the blocking screen, for Customized Blocking Screen, click Edit.

   • If you selected local authentication as the website login authentication method, add user information to the user information database. For Device User Database, click Edit. For details, refer to Adding, Editing, or Viewing User Information in the User Database.

   • If you selected an alternate login method that requires a network authentication server, provide information about the server. For Authentication Servers, click Edit. For details, refer to Configuring Network Authentication Settings.

   • To enable personalization for logged-in users, for Personalization, click Edit. For details, refer to Enabling Personalization.

   • To view or delete personalization profiles, for Personalization Profiles, click Edit. For details, refer to Viewing and Deleting Personalization Profiles.

   • To provide information about your LDAP server for personalization, for LDAP Servers, click Edit. For details, refer to Configuring LDAP Server Optional Information.

   • To enable or disable the logout prompt at the control panel, for Log Out Confirmation, click Edit. To disable the log out confirmation prompt on the device control panel, select Yes, then click Save.

Configuring Xerox Secure Access

1. Access the Embedded Web Server and log in to the Embedded Web Server as a System Administrator.

2. In the Embedded Web Server, click Properties→Login/ Permissions/ Accounting→Login Methods.

3. In the Configuration Settings table, for Xerox Secure Access Setup, click Edit.

4. Configure the remote server. For details, refer to the instructions that are provided with your server hardware. After the server is configured, it communicates with the printer and completes the configuration process automatically.

5. To configure communication manually, personalize instructional windows, and review accounting options, click Manually Configure. For details, refer to Manually Configuring Xerox Secure Access Settings below.

6. To return to the Login Methods page, click Pending Remote Server Setup.

7. To configure any settings that are marked in red text as Required; Not Configured, in the Configuration Settings table, click Edit.

Manually Configuring Xerox Secure Access Settings

If you are using Xerox Secure Access for authentication, you can configure remote server communication manually, personalize instructional windows, or review accounting options.

1. In the Embedded Web Server, click Properties→Login/ Permissions/ Accounting→Login Methods.

2. In the Configuration Settings area, for Xerox Secure Access Setup, click Edit.

3. Click Manually Configure.

4. For Server Communication, select the address type and port number.

5. Type the appropriately formatted address and port number.

6. In the Path field, type the following HTTP path: public/dce/xeroxvalidation/ convauth.

7. For Embedded, select Enabled.

8. For Device Log-In Methods, select an option:

   • Xerox Secure Access Device Only: This option allows users to access the printer only using the card reader.

   • Xerox Secure Access Device + alternate onscreen authentication method: This option allows users to access the printer by logging in at the control panel.

9. When the Network Accounting feature is configured, the printer can obtain user accounting information from the authentication server.

   • To reduce the number of screens that appear when a user logs in at the control panel, select Automatically apply Accounting Codes from the server.

   • If you want users to provide an accounting code at the control panel, select User must manually enter accounting codes at the device.

10. To create login instructions for users, in the Device Instructional Blocking Window, type the text that you want to appear on the touch screen:

    1. In the Window Title field, type the text that you want to appear as a title at the top of the touch screen.

    2. In the Instructional Text field, type the instructions that you want to appear below the title.
       
       Note: If the title and prompt are configured on the Xerox Partner authentication server, then any instructional text that you type is ignored.
       
       

11. Click Save.