Configuring PrinterOn to use Azure AD
ePrinterOn supports using Azure Active Directory, Microsoft’s cloud-based Identity Management Service, as the authenticator for your PrinterOn service. Azure AD sits in the cloud, external to the PrinterOn service. As a result, when a user must authenticate, the PrinterOn Server redirects them to an external URL hosted by Azure AD where the user can supply their credentials.
If the user is successfully authenticated, Azure AD creates a user token that PrinterOn uses as confirmation that the user is authorized to access the PrinterOn service. Each subsequent time the user attempts to use a protected printer, PrinterOn checks with Azure AD to determine whether the user token is still valid. If so, the user remains authenticated. Otherwise, the user must re-authenticate.
User credentials are submitted to Azure AD. PrinterOn never requests the user’s credentials directly.
When using Azure AD for authentication, the PrinterOn Server uses its internal user store to control access to PrinterOn resources. PrinterOn downloads user and/or group data from the Azure AD user store to the PrinterOn user store, where you can create access control rules.
The PrinterOn Server lets you configure how data is synchronized; you can pro-actively download the contents of the Azure AD user store, or you can populate the PrinterOn user store as each user logs in for the first time. You can control the synchronization of user data and group data separately, allowing you to pre-populate the PrinterOn user store with the Azure AD groups but populate each user only when they log in for the first time, for example.
📘 Instructions
To configure PrinterOn to use Azure AD, you’ll need to complete the following tasks:
Registering the PrinterOn service as a trusted app in Azure AD. This registration creates a bond of trust between the PrinterOn server and your Azure AD service. You also need to configure the Graph API permissions to specify what Azure AD data PrinterOn can access.
Configuring the Azure AD communication settings. To allow PrinterOn to successfully redirect users and to synchronize data from the Azure AD user store, you need to provide PrinterOn with your Azure AD network and security information.
Managing the PrinterOn user store to create user groups and Access Control Rules as necessary.