PrinterOn Print Management Overview

Transcription

1 PrinterOn Print Management Overview

2 Table of Contents 1. PrinterOn and Print Management Overview Combined PrinterOn and Print Management Capabilities Comprehensive Workflow Tracking & Auditing Fully Managed Print Workflows ios Compatibility Advanced Managed Capabilities Print Management Configuration Overview Configure LDAP/Active Directory Authentication in CPS Configure Printing and Print Management Configuration Configure PrintAnywhere Lookup Services PrinterOn Guest Printing Overview Web & Mobile App Configuration Guest Login Activation Guest Printer Activation: Manage Guest User Settings Ricoh Streamline NX and PrinterOn Software Version Requirements Web Services Configuration Requirements Enable Streamline NX Integration Streamline NX Related User Settings Streamline NX Release Code Settings Streamline NX Related Driver Settings PrinterOn On-Premise Server Guest Configuration Enable Guest Printers Equitrac and PrinterOn Software Deployment Requirements Web Services Configuration Requirements PrinterOn Web Upload and Mobile apps Scenario 1: Equitrac Secure Release Disabled (Auto Release): Scenario 2: Equitrac Secure Release Enabled Using PrinterOn Release Codes Scenario 3: Equitrac Secure Release Enabled Without PrinterOn Release Codes PaperCut and PrinterOn Software Deployment Requirements PrinterOn Web Upload and Mobile apps Scenario 1: PaperCut Secure Release Disabled (Auto Release): Scenario 2: PaperCut Secure Release Enabled Using PrinterOn Release Codes Scenario 3: PaperCut Secure Release Enabled Without PrinterOn Release Codes PaperCut Printing Scenario 1: PaperCut Secure Release Disabled (Auto Release): Scenario 2: PaperCut Secure Release Enabled Using PrinterOn Release Codes Scenario 3: PaperCut Secure Release Enabled Without PrinterOn Release Codes Web Services Configuration Requirements Ricoh User Codes and PrinterOn Benefits of Ricoh User Codes Software Deployment Requirements User Code Print Workflow Hosted Print Portal PrinterOn Server Install and Configuration Guide 2

3 Mobile Applications PrintWhere Applications PrinterOn Server Web Print Portal Print Workflow Web Services Configuration Requirements Ricoh Device Configuration User Code Configuration Restricting Print Access for User Codes Appendix A: Configure Interactive Authentication Services Appendix B: Configure PrintAnywhere for CPS Authentication Management Appendix C: PrinterOn Server Printing User Lookup Services Trademarks and Service Marks Copyright Notice PrinterOn Server Install and Configuration Guide 3

4 1. PrinterOn and Print Management Overview PrinterOn has focused on providing Cloud Print solutions to connect users to their output no matter where they are. The PrinterOn solution is designed to operate alongside and complement an existing print management installation. This includes providing a wide range of Mobile Print options along with various print management technologies such as Pull Printing. The PrinterOn solution integrates many years of experience working alongside the largest (and smallest) print management providers. In most cases the PrinterOn solution will work out of the box. Many of the requirements are being managed automatically by the PrinterOn software to ensure print data is delivered to the managed print queues and printers in a format that is expected by the print management software. The PrinterOn solutions work well with most print management and cost recovery solutions when deployed along with a common authentication service such as LDAP or Active Directory. This allows PrinterOn to authenticate users, collect the information necessary about the user and deliver it securely to the print management solution. This approach allows PrinterOn to provide a wide range of mobile print methods without limiting the print management software PrinterOn Server Install and Configuration Guide 4

5 1.1. Combined PrinterOn and Print Management Capabilities The primary goal of integrating mobile print with print management is ensuring a user s information and identity is correctly linked with their print job throughout the entire print process, from submission to authentication, to job release. PrinterOn s solution includes a broad range of techniques to ensure that a user s identity is properly collected and communicated to your print management installation Comprehensive Workflow Tracking & Auditing PrinterOn works best when using the same Active Directory or LDAP server as your print management installation. PrinterOn solution will extend traditional authentication and authorization to all its supported printing methods. By providing your print management installation with the necessary user information, PrinterOn can extend the existing tracking and auditing capabilities to include new workflows. User-based auditing/tracking Guest print auditing/tracking Device-based auditing/tracking Mobile App print auditing/tracking print auditing/tracking PrinterOn + PMS PrinterOn Server Install and Configuration Guide 5

6 Fully Managed Print Workflows PrinterOn allows you to extend the existing managed print environment beyond traditional print methods. PrinterOn extends all the same managed print capabilities to all our print workflows. Web-based Printing Mobile App Printing ios Android, BlackBerry, Windows Surface, Nook, Kindle ChromeOS Printing Native ios printing printing Desktop Printing Citrix, SAP & Oracle Printing PrinterOn ios Compatibility PrinterOn s modular and flexible design approach allows the PrinterOn solution to extend all the benefits of print management to Apple s ios platform. PrinterOn s solution allows ios devices to easily submit and benefit from both the simplicity of AirPrint and the robust capabilities of print management. PrinterOn extends the following services to ios users integrated with print management: o o o o o Pull Printing Authenticated LDAP/Active Directory Print Authenticated job release using native print management release clients Guest printing Multiple managed print queues PrinterOn Server Install and Configuration Guide 6

7 Advanced Managed Capabilities When integrated together, PrinterOn can offer some unique capabilities that are not available when PrinterOn, or your print management solution is deployed alone. PrinterOn also works to ensure that many of the advanced features are available when submitting print jobs using PrinterOn. Mobile/Global Print Submission Submit print jobs from any network, 3G/4G, wireless, wired Secure Release Integrate and support a wide range of release options offered including authentication, card-access, etc Leverage both MFP embedded release clients and software release stations PrinterOn + PMS Follow-Me Print/Pull Print Managed Global Deployments PrinterOn s solution with ability to distribute print jobs globally offers new and unique ways of offering mobile print across geographic regions and disconnected networks Advanced Guest Print Features such as default guest user names and decorating guest user names provide numerous options to track and report guest user printing in your environment. Dynamic and customizable print workflows for guest users allow guest jobs to be isolated from standard print and offer alternative release options PrinterOn Server Install and Configuration Guide 7

8 2. Print Management Configuration Overview In most deployments, little to no additional configuration is required beyond ensuring that PrinterOn is configured to use the same authentication service as the print management installation. This is most often an Active Directory or LDAP server. The following section will go into further detail regarding individual settings to provide a greater understanding of the options. A summary of the configuration requirements is: Ensure your PrinterOn printer/mfp is configured to require a User Identifier Ensure your PrinterOn server and print management server are using the same LDAP or Active Directory Server Ensure your PrinterOn printer listing is configured to Automatically Release. This will allow print jobs to be automatically released to a managed print management printer queue Configure LDAP/Active Directory Authentication in CPS To configure LDAP or Active Directory authentication for use with your PrinterOn server, some specific information will be required regarding your local LDAP/AD configuration. 1. Ensure you are logged into PrinterOn Configuration Manager. 2. Click on the Authentication tab to access the Authentication Workflow Selection screen 3. Enable LDAP/AD by selecting it from the drop down screen 4. Select Add to add a new LDAP server configuration a. Give your LDAP configuration a Name. This is helpful when configuring authentication across multiple domains. b. Choose Advanced Enabling this option will provide user account validation capabilities as well as additional services such as locating user identities using a supplied address. c. Provide the necessary information such as the Bind DN (and password if required). PrinterOn Server Install and Configuration Guide 8

9 d. Supply the Search DN values. This DN will be used to locate user information such as the user s account name if printing via . e. Enter User Attribute, User ID Attribute and Domain Name. f. Select Test to validate the LDAP bind works with the current configurations (if it fails it will display an error message) g. Select Apply Settings to save the configurations. h. Select Apply Settings to enable LDAP authentication NOTE: Using the Advanced LDAP functionality provides the greatest flexibility when enabling other services such as printing. Using this authentication type will simplify adding services such as printing in the future. PrinterOn Server Install and Configuration Guide 9

10 2.2. Configure Printing and Print Management Configuration When the PrinterOn Server is integrated with a print management deployment it is important to associate user information with the print job to ensure proper tracking of print jobs. When also supporting printing additional steps must be taken to locate and link the user s account information with their address. The User Lookup Integration is designed to allow the PrinterOn Server to search for and utilize user account information in requests. When a user submits a job to the PrinterOn Server, the server can utilize the user s address to query an LDAP/Active Directory server, to locate the user s domain account name and associate the job with this user. This option allows users to be tracked by the print management server and have jobs associated with the domain accounts Configure PrintAnywhere Lookup Services The following configuration will provide the most commonly used configuration mode. Additional details that may pertain to your configuration are available in the PrintAnywhere Administrator Guide. 1. Login to the PrinterOn Configuration Manager 2. Select the Advanced tab, then select Components 3. Select Configure for the PrintAnywhere server component 4. Choose the Integration tab 5. Under the Integration Type drop down select User Lookup 6. Click Edit 7. Enter the IP address or domain name of your CPS Server and append /cps/cpsapi a. Example: 8. Enter the username, password and API key created previously in CPS to the supplied fields 9. Click Test and populate the supplied fields to confirm whether PrintAnywhere can successfully locate user information for print jobs PrinterOn Server Install and Configuration Guide 10

11 User Types: Users may be classified as either Identified or Unidentified; you may choose how the system should process jobs for each of these user types individually. An Identified User is one that can be located using the User Lookup API. To be classified as an Identified User the API must successfully respond and provide a valid username for the user. When a user is identified the job owner information for the print job will be set to the retrieved username. An Unidentified User is any user for which the server cannot locate an associated user name for the user s address. PrinterOn Server Install and Configuration Guide 11

12 3. PrinterOn Guest Printing Overview PrinterOn provides flexible options for configuring guest printing for use alongside a Print management solution. The following provides a brief overview of the configuration options available to a PrinterOn administrator to integrate Guest printing Web & Mobile App Configuration The following options are available in the PrinterOn Server Web Configuration Manager Guest Login Activation Enabled: When enabled, a guest login option will be provided on the CPS print page Guest Printer Activation: This option allows you to configure which printers are classified as Guest printers. When enabled, the printer will be set as a guest printer and users without valid LDAP/AD credentials can submit documents though web upload or mobile app submission. PrinterOn Server Install and Configuration Guide 12

13 Manage Guest User Settings Do Nothing When selected, all guest job submissions will have a set job owner name of ldapguestlogin@printeron.com. Supply a Default User ID for Guests When selected, all guest job submissions will have a set job owner name based on the value set in this field. Prompt Guests for a User Identifier: When selected, guests will be prompted for a user identifier before submission. Add prefix to Guest User ID: When enabled, all guest job submissions will be prepended by the value set in this field. Ensure User ID is unique: When enabled, CPS will verify the user name supplied by the guest user does not match any valid usernames within the LDAP/AD setup. PrinterOn Server Install and Configuration Guide 13

14 4. Ricoh Streamline NX and PrinterOn The following describes various workflows that may exist when integrating PrinterOn with Ricoh s Streamline NX Software Version Requirements The PrinterOn integration with Streamline NX requires: Streamline NX Version 2.1 or later PrinterOn Server 2.3 or later 4.2. Web Services Configuration Requirements To fully enable Streamline NX support, the PrinterOn Printers must be configured to enable the feature. This step is done on the PrinterOn Administrator s Console located at Enable Streamline NX Integration 1. Open your web browser. 2. Go to: tors. 3. Click on PrinterOn 4. Enter /User Name and Password. 5. Click [Log In]. The Management Home Page displays. 6. Click Printers function icon 7. Select the Optional Settings tab of the printer will be configured on PrinterOn Server Install and Configuration Guide 14

15 8. Scroll to Advanced Integration Options and check Enable 3 rd Party Integrations 9. Select Ricoh Streamline NX Mode 1 from the Print Management Service combo box Streamline NX Related User Settings Some additional printer configuration settings are required to complete the configuration. The following describes some required settings, as well as some recommended settings when using PrinterOn and Streamline NX. 1. Click Printers function icon 2. Select the Optional Settings tab 3. Scroll to Job and User Information. 4. Select Required from the User Identifier combo box Save Settings. PrinterOn Server Install and Configuration Guide 15

16 Streamline NX Release Code Settings If the service will support release codes either for any type of users, including cases where only Guest Users will receive the Release Codes, ensure that the following options are set. The On-Premise Server will manage providing release codes based on the desired authentication style. 1. Click Printers function icon 2. Select the Optional Settings tab 3. Scroll to Privacy Release Code section. 4. Select Required from the Combo Box. 5. Enable all 3 checkboxes including 6. Save Settings. PrinterOn Server Install and Configuration Guide 16

17 Streamline NX Related Driver Settings Some additional printer configuration settings are required to complete the configuration. The following describes some required settings, as well as some recommended settings when using PrinterOn and Streamline NX. 7. Click Printers function icon 8. Select the Required Settings tab 9. Scroll to Printer Configuration section. 10. Select Ricoh and Ricoh Universal PCL 6 v4 11. Save Settings PrinterOn On-Premise Server Guest Configuration The following section describes the configuration options when using PrinterOn Server with Streamline NX. The information below will provide standard configuration options for servers offering authenticated user access and guest printing with Streamline NX. NOTE: Configure your LDAP and authentication settings prior to configuring the Guest User Workflows Enable Guest Printers In order for unidentified users to access printer, these printers need to be enabled as Guest Printers. This is done using the PrinterOn Server Configuration Manager. PrinterOn Server Install and Configuration Guide 17

18 5. Equitrac and PrinterOn The following describes various workflows that may exist when integrating PrinterOn with Equitrac. Due to the various deployment and customer requirements, each use case must be considered. NOTE: Equitrac Release Station software is the recommended release method when co-deploying PrinterOn and Equitrac. Other release methods such as the Equitrac MFP embedded release can be used, but it is not recommended due to Guest users requiring a PIN to authenticate prior to entering a release key. Additionally, Release Keys are not required fields and therefore can be bypassed on the MFP panel that can provide access to all available documents, or all Guest-submitted documents available depending on the Equitrac configuration. Release Keys are only supported when integrating with Equitrac Express Software Deployment Requirements When integrating with Equitrac, PrinterOn can be deployed in a variety of ways and will adapt to your existing configuration. To ensure compatibility and that a user s identity is properly communicated to Equitrac use one of the following 2 options 1. Install PrinterOn s Print Delivery Station on the Equitrac DRE. o If multiple DRE servers are used a PDS may be installed on each server. PDS should be configured to receive and process jobs only for printers managed by the DRE server on which it s installed. Or 2. Enable Use PJL in the Equitrac configuration o This allows PDS to be installed on any PC or server and successfully deliver job owner information to Equitrac. PrinterOn Server Install and Configuration Guide 18

19 5.2. Web Services Configuration Requirements To fully enable Equitrac secure release support, the PrinterOn Printers must be configured to enable the feature. This step is done on the PrinterOn Administrator s Console located at Open your web browser. 13. Go to: rators. 14. Click on PrinterOn 15. Enter /User Name and Password. 16. Click [Log In]. The Management Home Page displays. 17. Click Printers function icon 18. Select the Optional Settings tab of the printer Equitrac secure release will be configured on 19. Scroll to Advanced Integration Options and check Enable 3 rd Party Integrations 20. Select Equitrac Printer Release Server from the Print Management Service combo box. PrinterOn Server Install and Configuration Guide 19

20 21. Additional Integration option includes support for Xerox Standard Accounting and FujiXerox Mode1 22. Select Save to confirm the settings PrinterOn Server Install and Configuration Guide 20

21 5.3. PrinterOn Web Upload and Mobile apps The following describes common Equitrac configurations including Equitrac Secure Release and Accounting Scenario 1: Equitrac Secure Release Disabled (Auto Release): PrinterOn Configuration: Set the Guest User Identity from the Authentication tab Choose the selection Supply a default User ID for Guests OR Choose the selection Prompt guests for a user identifier It is recommended you enable a prefix to the Guest User ID to make reporting in Equitrac straightforward Enable Guest LDAP setting on printers you want to allow guests to print to Release Codes disabled on all guest printers Equitrac Configuration: If prompting users for a username, Auto-account creation MUST be enabled In this case the job will print automatically and be accounted properly by Equitrac Scenario 2: Equitrac Secure Release Enabled Using PrinterOn Release Codes PrinterOn Configuration: Set the Guest User Identity from the Authentication tab Choose the selection Supply a default User ID for Guests Make note of the User ID chosen The key point is that the guest user name set in PrinterOn needs to match with a user account in Equitrac Enable Guest LDAP setting on printers you want to allow guests to print to Release Codes required and auto-generated for all guest printers must be set on the portal Equitrac Configuration: Create a user in Equitrac that matches the User ID in CPS to collect and track Guest prints In this case the job can be released and accounted properly by Equitrac Guests can use the Equitrac Release Station to enter their Release Key and print their documents o Guests can use the embedded release software on an MFP provided that the Guest has been given a User PIN to authenticate, and the embedded software is capable of prompting for a Release Key. NOTE: Release Key can be bypassed in some cases, so PrinterOn highly recommends limiting Guest release to the Equitrac Release Station software. PrinterOn Server Install and Configuration Guide 21

22 Scenario 3: Equitrac Secure Release Enabled Without PrinterOn Release Codes PrinterOn Configuration: Set the Guest User Identity from the Authentication tab Choose the selection Supply a default User ID for Guests Make note of the User ID chosen The key point is that the guest user name set in PrinterOn needs to match with a user account in Equitrac Enable Guest LDAP setting on printers you want to allow guests to print to Equitrac Configuration: Create a user in Equitrac that matches the User ID in CPS to collect and track Guest prints In this case the job can be released and accounted properly by Equitrac using any release mechanism PrinterOn Server Install and Configuration Guide 22

23 6. PaperCut and PrinterOn The following describes various workflows that may exist when integrating PrinterOn PaperCut. Due to the various deployment and customer requirements, each use case must be considered 6.1. Software Deployment Requirements When integrating with PaperCut, PrinterOn can be deployed in a variety of ways and will adapt to your existing configuration. To ensure compatibility and that a user s identity is properly communicated to PaperCut use one of the following 2 options 1. Install PrinterOn s Print Delivery Station on the PaperCut Server. o If multiple PaperCut servers are used a PDS may be installed on each server. PDS should be configured to receive and process jobs only for printers managed by the PaperCut server on which it s installed. Or 2. Configure PaperCut to extract usernames from spool files. See PaperCut s documentation for more information. o The following regular expression may be used to extract a PrinterOn user o This allows PDS to be installed on any PC or server and successfully deliver job owner information to PaperCut. o NOTE: PrinterOn will also use other common spool data information if present. If your PaperCut installation is already configured to use some of the common PJL headers, no additional configuration may be required. PrinterOn Server Install and Configuration Guide 23

24 6.2. PrinterOn Web Upload and Mobile apps The following describes common PaperCut configurations including PaperCut Secure Release and Accounting Scenario 1: PaperCut Secure Release Disabled (Auto Release): PrinterOn Configuration: Set the Guest User Identity from the Authentication tab Choose the selection Supply a default User ID for Guests OR Choose the selection Prompt guests for a user identifier It is recommended you enable a prefix to the Guest User ID to make reporting in PaperCut straightforward Enable Guest LDAP setting on printers you want to allow guests to print to Release Codes disabled on all guest printers PaperCut Configuration: If prompting users for a username, On Demand User Creation MUST be set to create the user on demand In this case the job will print automatically and it will be accounted properly by PaperCut Scenario 2: PaperCut Secure Release Enabled Using PrinterOn Release Codes PrinterOn Configuration: This scenario is not supported as PrinterOn release codes are not recognized by PaperCut Scenario 3: PaperCut Secure Release Enabled Without PrinterOn Release Codes PrinterOn Configuration: Set the Guest User Identity from the Authentication tab Choose the selection Supply a default User ID for Guests Make note of the User ID chosen The key point is that the guest user name set in PrinterOn needs to match with a user account in PaperCut Enable Guest LDAP setting on printers you want to allow guests to print to PaperCut Configuration: Create a user in PaperCut that matches the User ID in CPS to collect and track Guest prints In this case the job can be released and accounted properly by PaperCut using any release mechanism PrinterOn Server Install and Configuration Guide 24

25 6.3. PaperCut Printing Scenario 1: PaperCut Secure Release Disabled (Auto Release): PrinterOn Configuration: Within User Lookup configuration, ensure Unidentified users jobs are set to Automatic Release Release Codes disabled on all printers PaperCut Configuration: PaperCut On Demand User Creation MUST be set to create the user on demand in order to account for unidentified (guest) users In this case the job will print automatically and it will be tracked in PaperCut o If the user s is john@company.com, then the user will be tracked as john. PaperCut will form the tracked user Scenario 2: PaperCut Secure Release Enabled Using PrinterOn Release Codes PrinterOn Configuration: This scenario is not supported as PrinterOn release codes are not recognized by PaperCut Scenario 3: PaperCut Secure Release Enabled Without PrinterOn Release Codes PrinterOn Configuration: Within User Lookup configuration, ensure Unidentified user s jobs are set to Automatic Release Release Codes disabled on all printers PaperCut Configuration: PaperCut On Demand User Creation MUST be set to create the user on demand in order to account for unidentified (guest) users A manual configuration step is required by PaperCut administrator after the user account was autocreated: o The administrator needs to manually assign PaperCut Card Numbers to the user account o The user must be informed of the PaperCut Card Numbers to be able to release their job o User can release jobs from any method that allows them to enter a User PIN Alternatively, the managers/administrator can release the job for the user without a need for PaperCut Card Numbers 6.4. Web Services Configuration Requirements No further changes are required on the web to support further integration with PaperCut PrinterOn Server Install and Configuration Guide 25

26 7. Ricoh User Codes and PrinterOn Ricoh User Codes offer a convenient way to integrate PrinterOn s mobile printing while still monitoring each job for output tracking and charge-back purposes. NOTE: Ricoh User Codes are designed to work in very simple installations, as well as more complex ones described in this document. The Ricoh User Code integration works when deploying either PrinterOn s Hosted solution or On-Premise solution. In most cases, simply configuring the printer configuration on the PrinterOn website is sufficient to enable the Ricoh User Codes. Ricoh uses a standard User Code system to authenticate the user. The operator simply enters their User Code, which is compared to the registered data in the device s address book. No one without a valid User Code can access the machine. The same code can be used by multiple users to track system use by client, period, or by job for bill-back purposes Benefits of Ricoh User Codes Job details (such as paper size and page count) are captured and assigned to user codes Cost effective accounting solution for output tracking and charge-backs Allows you a controlled way to offer color output while accurately tracking individual usage Solution does not require software to be loaded on user computers 7.2. Software Deployment Requirements When integrating with Ricoh User Codes, PrinterOn can be deployed in a variety of ways and will adapt to your existing configuration. PrinterOn offers two deployment options with the Ricoh User Code solution. 1. Ricoh HotSpot Embedded Solution o Install and configure the Ricoh HotSpot Embedded software on a supporting Ricoh MFP and configure for use with the HotSpot Hosted or HotSpot Enterprise solution. o No additional configuration is required in the HotSpot Embedded software to support Ricoh User Codes. Or 2. PrinterOn s Print Delivery Station o Install PrinterOn s Print Delivery Station on the same network as the Ricoh MFP o Configure the Print Delivery Station to deliver print jobs to the Ricoh MFP: Configure the printer connection using TCP communication in the PDS Printers Tab. Example: tcp:// :9100 PrinterOn Server Install and Configuration Guide 26

27 7.3. User Code Print Workflow The Ricoh User Code Workflow is available for all print workflows for both Hosted and On-Premise service. Users will be prompted to enter a User Code during the print process. Mobile applications, the PrinterOn Print Portal, the CPS print portal and PrintWhere will all automatically display the prompt once saved and printer settings are synchronized Hosted Print Portal When using the Hosted Print Portal, users will be presented with the Printing Options page that will allow them to enter their User Code Mobile Applications When using the PrinterOn Mobile Applications, users will be presented with the Options page that will allow them to enter their User Code. PrinterOn Server Install and Configuration Guide 27

28 PrintWhere Applications When using PrinterOn s PrintWhere, the Universal Print Driver, when submitting their print jobs, users will be presented with the popup to enter a User Code PrinterOn Server Web Print Portal When using the PrinterOn Server, users will be presented with a field to enter the User Code while selecting the document and other submission options Print Workflow User Codes are not supported with printing using as the user has no ability to enter their User Code in an . It is recommended that print be disabled when using Ricoh User Codes. PrinterOn Server Install and Configuration Guide 28

29 7.4. Web Services Configuration Requirements To fully enable Ricoh User Code support, the PrinterOn Virtual Printers must be configured to enable the feature. This step is done on the PrinterOn Administrator s Console located at Open your web browser. 24. Go to: Click on PrinterOn or Ricoh HotSpot Printers if managing a Ricoh server. See Error! Reference source not found Enter /User Name and Password. 27. Click [Log In]. The Management Home Page displays. See Error! Reference source not found Click Printers function icon 29. Select the Options Settings tab 30. Scroll to Advanced Integration Options and check Enable 3 rd Party Integrations 31. Select Ricoh User Codes from the Print Management Service combo box. 32. Click Save 33. Confirm the settings are applied by selecting the Optional Settings tab again and review Job and User Information. The Client UID should be enabled and configured with the User Code label. PrinterOn Server Install and Configuration Guide 29

30 NOTE: The procedure below can be done either on Web Image Monitor or on MFD s front panel. The settings might look slightly different based on Printer s model. In this document we just mention the instruction on Web Image Monitor. NOTE: Locked print is not compatible with PrinterOn. Normal print is the only supported workflow Ricoh Device Configuration User Code Configuration Login to Web Image Monitor as an administrator. Go to Address Book/List. Once in Address Book page select Add User or select a user and press Change the modify an existing user. PrinterOn Server Install and Configuration Guide 30

31 Within the change user s setting page associate a user code with a user under the Authentication Information section Save the setting by clicking on OK button. The new user is now part of the address book with a user code associated with the account. PrinterOn Server Install and Configuration Guide 31

32 Restricting Print Access for User Codes In order to track print jobs using User Codes and limit access to authorized users, additional configuration is required on the Ricoh MFP. User Authentication Management must be set to User Code. NOTE: Enabling the following configuration will only allow printing when jobs are submitted with a valid User Code. Skipping this step will allow User Code reporting, but unknown users will automatically be added to the Address Book. Within the Web Image Monitor select User Authentication Management. Under User Authentication Management select User Code PrinterOn Server Install and Configuration Guide 32

33 Scroll down towards the bottom of the page and locate User Code Authentication Settings. NOTE: The options presented in this section will differ based on the printer or MFP options. To restrict access to only valid User Code, ensure PC Control is disabled. Enabling PC Control, will allow automatic user creation in Address Book which is not desired. Enable the appropriate functions to be controlled and to be tracked by User Codes. Under Available Functions > Printer, ensure PC Control is disabled Click OK and Save. Job history and User Codes may now be tracking the in MFPs or Printers Address Book list to monitor usage PrinterOn Server Install and Configuration Guide 33

34 Appendix A: Configure Interactive Authentication Services Interactive Authentication is best suited for cases when: PrintWhere Universal Desktop printing is enabled User Lookup for Print is disabled To leverage the CPS Server s built in authentication services for all printing clients, some information must first be configured in the PrinterOn Directory to publish the information. Before continuing, ensure you have access to the CPS Server s Service URL. 1. Log in at and click the Printers icon. 2. Identify your desired printer and select the Payment and Authorization section. 3. Locate the Authorizing users section and enable Redirect to authorize user, track pages or bill customer. Enabling this option will provide additional configuration options. 4. Enable the User Authentication URL - in the provided field enter the IP address or domain name for your CPS server along with /cps/aaalogin.jsp a. Example: 5. Save your settings. NOTE: These settings inform print clients such as the PrintWhere driver where to locate authentication services. For simple Web or mobile print jobs this informs CPS that the authentication services are local and hosted by CPS itself. If you require custom authentication services, PrinterOn enables you to develop your own authentication module and direct CPS to your custom authentication module using this same method. PrinterOn Server Install and Configuration Guide 34

35 Appendix B: Configure PrintAnywhere for CPS Authentication Management When using an authentication scheme such as LDAP, the PrinterOn Server performs authentication validation on behalf of mobile application users. Print requests submitted from mobile applications that leverage PrinterOn s Document API must first communicate with the PrinterOn Server prior to delivering the print request to PrintAnywhere. This workflow allows the PrinterOn Server to validate a user s authentication credentials. To enable this workflow, PrintAnywhere must be configured to allow CPS to manage user authentication. If this option is not enabled, PrintAnywhere will not allow users to submit print jobs without NOTE: This is the default configuration for the PrinterOn Server, and changes may not be required. first confirming their authentication credentials. The following configuration will provide the most commonly used configuration mode. Additional details that may pertain to your configuration are available in the PrintAnywhere Administrator Guide. 1. Login to PrinterOn Configuration Manager 2. Select the Advanced tab, then select Components 3. Select Configure on the Print Anywhere Server component 4. Select the networking tab 5. Under Status Server enable Allow CPS to Manage Authentication 6. Select Apply Settings to save the configuration PrinterOn Server Install and Configuration Guide 35

36 Appendix C: PrinterOn Server Printing User Lookup Services To communicate with CPS, PrintAnywhere must be given access rights and credentials to request user information. The following section will describe the steps necessary to create the API credentials to be configured in PrintAnywhere. 1. Ensure you are logged into PrinterOn Configurations Manager. 2. Click on the Advanced tab, then select Configure for Central Print Services 3. Select the API tab 4. Select the Green Plus sign to add a new API user account. 5. Enter a new username and password for the CPS API user. This information will later be set in the PrintAnywhere Configuration tool. (This will be described in detail further in this documentation.) 6. Under the Access Keys click the Green Plus sign to generate a new key. NOTE: The username, password and API key will be configured in the PrintAnywhere server. In order to request user information, PrintAnywhere must first authenticate itself using these credentials. Please note that PrintAnywhere does not transfer the password directly to CPS to authenticate. It will instead use the API key to generate an encrypted token used to verify the API credentials. Changing or removing any of the three values will disallow API access. PrinterOn Server Install and Configuration Guide 36

37 Trademarks and Service Marks The following are trademarks or registered trademarks of PrinterOn Inc. in Canada and other countries: PrinterOn, PrintAnywhere, Print Simply Anywhere, PrintWhere, PRINTSPOTS, the PrinterOn Logo, the PrinterOn Symbol, PrintConnect and PrintValet are trademarks and/or registered trademarks of PrinterOn. The following are trademarks or registered trademarks of other companies: Windows, Internet Explorer, Microsoft Word, Microsoft Excel, Microsoft PowerPoint, and Microsoft Visio are trademarks or registered trademarks of Microsoft Corporation. ipad, iphone and AirPrint and OS X are trademarks or registered trademarks of Apple. ios is a trademark or registered trademark of Cisco in the U.S. and other countries and is used by Apple under license. Android, Chrome OS and Chromebook are trademarks or registered trademarks of Google Inc. BlackBerry is a registered trademark of BlackBerry, Ltd. Other brands and their products are trademarks or registered trademarks of their respective holders. Copyright Notice Copyright 2015 by PrinterOn Inc. All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopy, recording, or otherwise, without the prior written permission of PrinterOn Inc. Disclaimer: PrinterOn Inc. makes no warranty with respect to the adequacy of this documentation, programs, or hardware, which it describes for any particular purpose, or with respect to the adequacy to produce any particular result. In no event shall PrinterOn Inc. be held liable for special, direct, indirect, or consequential damages, losses, costs, charges, claims, demands, or claim for lost profits, fees, or expenses of any nature or kind. Version 1.1 June 2015 PrinterOn Server Install and Configuration Guide 37