PaperCut MF offers several methods to authenticate copier users. The authentication methods supported by your copier will be listed as options in the External Device Settings section of its Device Details page:
Username and password, as specified in an external user directory source such as Active Directory or LDAP (except for internal users; see the section called “Internal Users (users managed by PaperCut MF)”).
Identity number, see the section called “User card and ID numbers”.
For two-factor authentication, it may be possible to require users to also enter a PIN. Users without a PIN will be asked to enter a PIN the first time they log in at the copier (set
ext-device.allow-new-pin-for-id-numtoNto disable this; see the section called “Using the Config Editor”).It may be possible to also mask the identity number (like a password) as the user enters it on the copier. This is particularly useful when no PIN is required.
Swipe card, see the section called “User card and ID numbers”.
This requires either a card reader connected to the copier, or may be achieved through a network card reader with a given host/IP address.
For two-factor authentication, it may be possible to require users to enter a PIN after swiping a card. Users without a PIN will be asked to enter a PIN the first time they log in at the copier.
Some copiers allow self-association, where the copier prompts for a username and password after a user swipes an unrecognized card, in order to associate the card to the user's account.
It may be possible to control whether or not a card swipe can also be used to log the user out of the copier.
Some copiers have an offline mode where they continue to operate while the application server is unavailable, see the section called “Offline mode” below.
Anonymous (no login required), where users can use the copier without identifying who they are. All copier activity will be associated with the specified user.
At least one of the above methods must be enabled. If anonymous authentication is enabled, all other authentication methods must be disabled.
By default, the copier cannot be used when the application server is unavailable (i.e. it is not running or there is a problem with the network). Offline mode, if available, offers a way to continue to use the copier in such cases. At the moment, it is only available on some selected devices as it is dependant on the firmware level.
Offline mode should only be enabled in trusted environments with unrestricted user accounts as it allows unauthorized access and overrunning account balances on restricted user accounts. For instance, this feature is suitable for commercial environments tracking print usage, but not charging. When implementing this feature in untrusted environments (e.g. student printing), it should be used in conjunction with unlock code, as accounts can be easily overdrawn regardless of restrictions.
When the copier is working in offline mode, users can log into the copier with a swipe card, and
activity is logged against the card number. This activity is not restricted. When connection to the
server is restored, the activity is logged against the user with that card number. If no user is found
for the card number, the activity is logged against the designated unknown user
(edit ext-device.unknown-offline-username to change the unknown user; see
the section called “Using the Config Editor”). A warning will also appear in the
App.Log when this happens. If there is no account for the unknown user, one will
be created.
It is important to note that in offline mode, the copier is unable to:
authenticate users anonymously or via username, identity number or PIN
associate swipe cards or PINs with users
access shared accounts
check account balances
apply restrictions
release print jobs
You can specify a delay between the time the copier first fails to contact the server and the copier going offline. This is useful to avoid switching to offline mode just for brief periods of server unavailability, e.g. a server reboot.
For added security, you can require offline mode to be unlocked before users can log into the copier with a swipe card. Unlocking offline mode involves entering the specified code at the copier and choosing to unlock the copier for a single use or until connection to the server is restored. This is specifically useful for education organizations where a supervisor or teacher can enter this code before the device can be used by users in offline mode.