Authentication

To apply the settings in this category to a device, Administrator Authentication Management must be enabled in the device settings. When Administrator Authentication Management is disabled, apply the template that enables Administrator Authentication Management in the [Administrator] category of the device before configuring this category.

Here are the groups of settings you can find on this node.

 

Authentication Type

Setting Item

Description

User Authentication Settings

Select the user authentication type:

[Off], [User Code Authentication], [Basic Authentication], [Windows Authentication], [LDAP Authentication], [Integration Server Authentication]

Enable External Authentication

These settings are part of the extended item settings. Refer to List of Extended Item Setting for the complete list.

Turn the setting Off or On.

 

When Enable External Authentication is set to On, the following are enabled.

These settings are part of the extended item settings. Refer to List of Extended Item Setting for the complete list.

Setting Item

Description

Logout When Card Removed

The user remains logged in while the IC card is in contact with the card reader. The user is logged out when the IC card is removed from the card reader.

The setting [Logout When Card Detected] cannot be enabled at the same time.

If Card Authentication Package V2 is set, it is recommended that Logout When Card Removed is enabled.

Logout When Card Detected

The user is logged out when the IC card is held against the card reader while the user is logged in. This is a setting for contactless IC cards.

The setting [Logout When Card Removed] cannot be enabled at the same time.

Exit Energy Saver Mode When Card Detected

You can select whether to set the device to recover from Energy Saver Mode when the IC card is held against the card reader. This is a setting for contactless IC cards.

Enable Character For PIN

Enables entering alphabetical characters in addition to numbers for the password.

Control Reading Card

The cache for the IC card’s login ID and password is used for login.

Use this setting when the authentication process takes time.

Panel Lock For Logout Failure

This setting prevents other users from logging in before the logout process is completed. Use this setting when the logout process takes time.

Manual Password Input

You can set whether to require the users to enter a password when they hold up their IC card against the card reader.

The following are the different modes.

  • Mode 0 - The Password Entry screen is not displayed.

  • Mode 1 - The Password Entry screen is displayed with the entry field blank.

  • Mode 2 - The Password Entry screen is displayed with the password retrieved from the IC card entered in the entry field (the password will appear as asterisks). The number of asterisks shown is the maximum number of characters possible for the password.

  • Mode 3 - The Password Entry screen is only displayed when the password cannot be retrieved from the IC card. The entry field will be blank.

If Card Authentication Package V2 is set, it is recommended that Manual Password Input is set to Mode 0 or Mode 2.

The Manual Password Input, Enable Character For PIN, and Control Reading Card settings are only available for devices released in spring 2009 or later. The Panel Lock For Logout Failure setting is only available for devices released in autumn 2012 and later (with exceptions). For details, please check your local Ricoh website for a list of supported devices or contact the Ricoh Group.

 

Access Control

User Code Access Control

Setting Item

Description

Copier

Specify whether to enable access control for the copier function for each user. Select the color settings that can be used when making copies from the following: [Black & White], [Single Color], [Two-color], [Full Color], or [Off].

Printer

Specify whether to enable access control for the printer function for each user. Select the color settings that can be used when making prints from the following: [Black & White], [Color], or [Disable].

  • Auto Register User Codes - Specify whether to register the user code contained in a print job automatically.

Fax

Specify whether to enable the access control for the fax function for each user.

Scanner

Specify whether to enable the access control for the scanner function for each user.

Document Server

Specify whether to enable the access control for the Document Server for each user.

 

Copier

These settings are part of the extended item settings. Refer to List of Extended Item Setting for the complete list.

Setting Item

Description

Restrict Copier usage

When checked, you must set the following:

  • Require key counter for copy

  • Disable authentication: copy

Require key counter for copy

Select which color will require a key when copying.

  • black&white

  • single color

  • dual color

  • full color

Disable authentication: copy Sets whether user authentication is performed(On) or not(Off).

 

Document Server

These settings are part of the extended item settings. Refer to List of Extended Item Setting for the complete list.

Setting Item

Description

Restrict document server usage

When checked, you must set the following:

  • Require key counter for DS

  • Disable authentication: DS

Require key counter for DS

Sets whether to require key counter for DS(On) or not(Off).

Disable authentication: DS Sets whether user authentication is performed(On) or not(Off).
DS access control

Refer to DS Access Control.

These function will become effective after the device reboots.

Default Document ACL

Refer to Default Document ACL.

This function is not available for devices that are not equipped with a Document Server.

 

DS Access Control

Setting Item

Description

Deny all WIM Access

The administrator and all users are not permitted to access the Document Server on WIM.

The “Document Server” menu and the various logs for “Document Server” on the “Job” screen will not be displayed.

Deny user WIM access but allow admin access

All users except the administrator are not permitted to access the Document Server on WIM.

The “Document Server” menu and the various logs for “Document Server” on the “Job” screen will not be displayed.

Hide print icon and print job history The “Print” button is not displayed in the Document Server document list screen for the administrator and all users. Also, “Print Job History” for “Document Server” is not displayed on the “Job” screen.

Hide fax remote send history

“Fax Remote Send History” for “Document Server” on the “Job” screen is not displayed for the administrator and all users. When the device’s fax transmission function is disabled or the device is not equipped with a fax, the “Send” button will not appear in the Document Server document list.

Hide scanner remote send history

“Scanner Remote Send History” for “Document Server” on the “Job” screen is not displayed for the administrator and all users. When the device’s scan transmission function is disabled or the device is not equipped with a scanner, the “Send” button will not appear in the Document Server document list.

Hide download in document list and in file details

The “Download” button is not displayed in the Document Server document list screen or the File Details screen for the administrator and all users.

Hide delete icon

The “Delete” button is not displayed in the Document Server document list screen for the administrator and all users.

Disallow guest access

Unauthenticated users (GUEST) cannot access the Document Server on WIM.

The “Document Server” menu and the various logs for “Document Server” on the “Job” screen will not be displayed.

The Document Server information displayed on the "Job" screen depends on combination of settings configured.

DS Access Control selection  Authentication Function: DS   User(s) who can access

Deny user WIM access

but allow admin access

Disallow guest access
unchecked unchecked

Enabled

  • Administrator

  • Authenticated User

unchecked unchecked

Disabled

  • Administrator

  • Authenticated User

  • Unauthenticated User (GUEST)

checked unchecked

Enabled

Administrator

checked unchecked

Disabled

Administrator

unchecked checked

Enabled

  • Administrator

  • Authenticated User

unchecked

checked

Disabled

  • Administrator

  • Authenticated User

checked

checked

Enabled

Administrator

checked

checked

Disabled

Administrator

 

Default Document ACL

Setting Item

Description

Read-only Users are only permitted to view the documents.
Edit Users are permitted to edit the documents. However, they cannot delete documents.
Edit/Delete Users are permitted to edit and delete documents.

Full control

Users are permitted to perform all operations permitted to the document owner. Users are able to perform all operations including changing the access privileges of the document.

If Card Authentication Package V2 has been implemented, select Full control.

 

Fax

These settings are part of the extended item settings. Refer to List of Extended Item Setting for the complete list.

Setting Item

Description

Restrict fax usage

When checked, you must set the following:

  • Require key counter for fax

  • Disable authentication: Fax

Require key counter for fax

Sets whether to require key counter for fax(On) or not(Off).

Disable authentication: Fax Sets whether user authentication is performed(On) or not(Off).

 

Home Screen

These settings are part of the extended item settings. Refer to List of Extended Item Setting for the complete list.

Setting Item

Description

Users Home Screen: Usage Limitation Select to allow or prohibit the display of home screen.
Users Home Screen: Display Login Dialog on User Home Screen Set whether to display the login dialog when Home button is pressed.

Please note the following:

  • Set this function to Disable if authentication is disabled for any one of the Copier, Document Server, Fax, Printer, or Scanner applications. If it is set to Enable, since the Authentication screen will be displayed when the Home screen is shown even if authentication is not performed for the application, you will not be able to view the application screen without performing authentication.

  • This function is only available for devices released in autumn 2011 or later (devices with Home screen display). For details, please check your local Ricoh website for a list of supported devices or contact the Ricoh Group.

 

Printer

These settings are part of the extended item settings. Refer to List of Extended Item Setting for the complete list.

Setting Item

Description

Restrict printer usage

When checked, you must set the following:

  • Require key counter for printer

  • Disable authentication: Printer

Require key counter for printer

Sets whether to require key counter for printer(On) or not(Off).

Disable authentication: Printer Sets whether user authentication is performed(On) or not(Off).

 

Scanner

These settings are part of the extended item settings. Refer to List of Extended Item Setting for the complete list.

Setting Item

Description

Restrict scanner usage

When checked, you must set the following:

  • Require key counter for scanner

  • Disable authentication: Scanner

Require key counter for scanner

Sets whether to require key counter for scanner(On) or not(Off).

Disable authentication: Scanner Sets whether user authentication is performed(On) or not(Off).

 

Color Settings

These settings are part of the extended item settings. Refer to List of Extended Item Setting for the complete list.

Setting Item

Description

Selective Color Authentication

Select which color will require authentication.

  • black&white

  • single color

  • dual color

  • full color

  • automatic color mode

 

SDK Authentication Settings

These settings are part of the extended item settings. Refer to List of Extended Item Setting for the complete list.

Setting Item

Description

SDK Authentication Settings

When checked, you must set the following:

  • Enable SDK Authentication

  • Enable Admin Login

Enable SDK Authentication

Enables the use of a server that performs external authentication using an SDK application.

In order to make the settings effective, select LDAP Authentication in User Authentication Settings.

To use an authentication method other than LDAP authentication, disable this setting.

Enable Admin Login

The server that performs external authentication using an SDK application is given the same administrative privileges as the Address Book in the device.

Enabling this setting will allow operations that require administrative privileges to be performed from outside the device.

 

SDK

These settings are part of the extended item settings. Refer to List of Extended Item Setting for the complete list.

Setting Item

Description

User authentication SDK1 When enabled, the SDK 1 user can be used for authentication.
User authentication SDK2 When enabled, the SDK 2 user can be used for authentication.
User authentication SDK3 When enabled, the SDK 3 user can be used for authentication.

 

Browser

These settings are part of the extended item settings. Refer to List of Extended Item Setting for the complete list.

Setting Item

Description

User Authentication: Browser When enabled, a user authentication is required when you open a browser.

 

User Limitation Detail Options

These settings are part of the extended item settings. Refer to List of Extended Item Setting for the complete list.

Setting Item

Description

Enable Logout Confirmation

A logout confirmation screen is displayed when the Logout button is pressed.

If Card Authentication Package V2 is configured, it is recommended that this settings is enabled.

Shortening Auto Logout Timer

You can select the interval for retry attempts when auto logout fails. Options are:

  • 60 seconds

  • 10 seconds

  • 20 seconds

  • 30 seconds

When the specified number of seconds elapses, auto logout is attempted again.

Apply ACL to both Users and Groups

The user can log in only when authentication with the Address Book in the device and external authentication using the SDK application are completed.

When this setting is disabled, login is possible if either authentication with the Address Book in the device or external authentication using the SDK application is completed.

Skip Password Input

The Password Entry screen is not displayed at the time of login.

Display Remaining Usage Count

When a limit has been set for a function such as Copy, the number of times the function can be used is displayed.

Duration to display remaining usage count

You can select how long the remaining number of times the function can be used is displayed. Options are:

  • 3 seconds

  • 6 seconds

  • 9 seconds

  • 12 seconds

The remaining number of times the function can be used is displayed for the specified number of seconds.

 

LDAP

Setting Item

Description

LDAP Authentication

Specify whether to enable the LDAP Authentication.

LDAP Server 1–5

If you select [LDAP Authentication] in [User Authentication Settings], select an LDAP authentication server.

If your machine does not support configuration of multiple LDAP servers, be sure to select only one LDAP server at a time. Selecting multiple LDAP servers at the same time will result in a batch settings failure.

LDAP Login Attribute

Enter an LDAP login attribute.

Global Identifier

Enter a global identifier.

LDAP Server

Specify whether to use the LDAP search.

LDAP Server 1–5

Perform batch settings for LDAP servers 1 to 5. To use the selected LDAP server, select LDAP servers 1 to 5.

Select [Program] to configure the selected LDAP server.

Select [Delete] to clear the settings of a LDAP server.

Identification Name

Enter the name.

Server Name

Enter the server name.

Search Base

Enter the search start point.

Port Number

Enter the port number.

If SSL is not used, the initial port number is 389. If SSL is used, the initial port number is 636.

SSL

Specify whether to use SSL.

Authentication

For authentication, select either of the following:

[Off], [On], [High Security], [Kerberos Authentication]

Authentication Realm

If you specify [Kerberos Authentication], you must then specify the realm that you want to protect with Kerberos authentication.

User Name

Enter the user name.

Password

Enter the password.

LDAP Server 1–5 (Search Conditions)

Identification Name

Enter the name as a search condition.

Email Address

Enter the e-mail address as a search condition.

Fax Number

Enter the fax number as a search condition.

Company Name

Enter the company name as a search condition.

Department Name

Enter the department name as a search condition.

Attribute

Enter the attribute as an optional search condition.

Key Display

Enter the key display name as an optional search condition.

 

Integration Server

Setting Item

Description

Integration Server Authentication

Specify whether to enable the Integration Server Authentication.

Server Name

If you select [Integration Server Authentication] in [User Authentication Settings], enter the Integration server name.

Domain Name

Enter the name of the domain where integration server authentication will be performed.

Authentication Type

Select the type of integration server authentication from the following:

[Windows Authentication (Native)], [Windows Authentication (NT Compatible)], [Basic Authentication (Integration Server)], [Notes Authentication], [Default]

SSL

You can specify whether or not to perform SSL.

 

Windows

Setting Item

Description

Windows Authentication

Specify whether to enable the Windows Authentication.

Domain Name

If you select [Windows Authentication] in [User Authentication Settings], enter the domain name to be used for authentication.

SSL

Specify whether or not to perform SSL.

Use Kerberos

Specify whether to use Kerberos authentication.

If you select [On] under [Kerberos Authentication], you must specify the realm to protect with Kerberos authentication.

Authentication Realm

Specify the realm to protect with Kerberos authentication.

 

Kerberos

Setting Item

Description

Realm 1–5

Enter the information about the realm you want to protect with Kerberos authentication. Up to five realms can be set. Select [Program] to configure the selected authentication realm. Select [Delete] to clear the settings of a selected realm.

Realm Name

Enter the name.

KDC Server Name

Enter the key distribution center (KDC) server address.

Corresponding Domain Name

Enter the name of the domain that corresponds to the realm.

 

Print

Setting Item

Description

Print Job Authentication

Specify whether to enable the Print Job Authentication.

Print Job Authentication

Select the print job authentication method:

[Entire], [Simple (All)], [Simple (Limitation)]

Limitation Range 1–5

Enter the range of IP addresses subject to authentication.

Parallel Interface (Simple)

Specify whether to allow parallel interface.

USB (Simple)

Specify whether to allow USB interface.

[Access Control] can be specified only when [User Authentication Settings] is set to [User Code Authentication].