Xerox Xerox Secure Access Unified ID System Support & Software Ratgeber Für Administratoren
Configuration & Management
Xerox Secure Access Administration Guide
34
Import and Synchronize User Accounts
To enable authentication, you need to create user accounts that match the attributes used on the card
swipe. When a user swipes their card, the Authentication Device forwards the access request to the
DCE, which then forward the card swipe details to the CAS. If the CAS locates a user account with
attributes matching those found on the card, the MFP is unlocked and the user can proceed with the
fax, scan, copy, or print job release.
swipe. When a user swipes their card, the Authentication Device forwards the access request to the
DCE, which then forward the card swipe details to the CAS. If the CAS locates a user account with
attributes matching those found on the card, the MFP is unlocked and the user can proceed with the
fax, scan, copy, or print job release.
There are three methods within Secure Access to import user accounts:
• Use Active Directory to import (and optionally synchronize) accounts
• Import user accounts from a CSV file.
• Create accounts manually within Secure Access Manager.
• Import user accounts from a CSV file.
• Create accounts manually within Secure Access Manager.
Use ADS to Import Existing Users
If you have an Active Directory server, you can select the account information you want to import and
synchronize. Synchronization will minimize the administration overhead and allow account updates to
occur automatically.
synchronize. Synchronization will minimize the administration overhead and allow account updates to
occur automatically.
Performing the steps outlined below causes a task to run in the background. In the Secure Access
Manager, click the Users tool to see the result of the task - the list of users will populate automatically
when the task is complete.
Manager, click the Users tool to see the result of the task - the list of users will populate automatically
when the task is complete.
Note:
The Secure Access services must be started by a Domain account with access to the contact
Active Directory. Ensure you are logged in as the Domain Administrator. If services are started
under the local administrative account, the Active Directory synchronization will fail.
under the local administrative account, the Active Directory synchronization will fail.
It’s important to select options in the correct order in the Active Directory Synchronization dialog, so
follow the steps provided below carefully.
1. In Secure Access Manager, click Configuration > Active Directory Synchronization.
2. Under the Domain controllers area, click Add. A Domain controller is a server that provides access
follow the steps provided below carefully.
1. In Secure Access Manager, click Configuration > Active Directory Synchronization.
2. Under the Domain controllers area, click Add. A Domain controller is a server that provides access
to the Active Directory for member computers. Type the Controller name in the field.
3. Under the Containers area, click Add. A container is a folder in the Active Directory tree structure
containing users, groups, or computers.
CAUTION:
Ensure that the OU containers you choose are comprised of user account data only. If
the OUs contain other data (such as system or contact info), you will see unexpected results. You
may need to create specific OU containers to be used only for importing and synchronization
purposes.
may need to create specific OU containers to be used only for importing and synchronization
purposes.
4. Adjust the Synchronization interval to change how often Secure Access synchronizes its database
with the specified Active Directory. The synchronization interval value must be at least 15 minutes.
5. Select or clear the Active Directory updates to be applied options—Adds, Deletes, or Changes—
to specify which Active Directory accounts Secure Access receives and applies to the accounts
database during subsequent synchronizations.
database during subsequent synchronizations.