Xerox SmartSend Support & Software Installation Guide
9-12
SMARTsend Security
SMARTsend Authentication
SMARTsend uses various authentication mechanisms to allow access to the application and to ensure that
information and options are only available to the appropriate individuals.
information and options are only available to the appropriate individuals.
Accessing SMARTsend
SMARTsend administrators and users are required to be authenticated with a valid Windows account to
obtain access to the SMARTsend web application. Users must use their SMARTsend computer credentials to
access the SMARTsend web site. Administration and user roles on the SMARTsend computer dictate roles
on the SMARTsend web site. Access to the SMARTsend administration site will only be granted to accounts
with administrative privileges on the SMARTsend computer.
obtain access to the SMARTsend web application. Users must use their SMARTsend computer credentials to
access the SMARTsend web site. Administration and user roles on the SMARTsend computer dictate roles
on the SMARTsend web site. Access to the SMARTsend administration site will only be granted to accounts
with administrative privileges on the SMARTsend computer.
If the SMARTsend computer is a member of a Windows domain, then Windows will automatically grant
access to the SMARTsend web site to users who are members of the same domain. If the SMARTsend
computer is not a domain member, accounts can be added individually using the Windows account creation
tools in the Microsoft Management Console. Similarly, administrative rights can be granted using the same
tools.
access to the SMARTsend web site to users who are members of the same domain. If the SMARTsend
computer is not a domain member, accounts can be added individually using the Windows account creation
tools in the Microsoft Management Console. Similarly, administrative rights can be granted using the same
tools.
SMARTsend Application Account
The SMARTsend application performs server side processing when users scan with a published
SMARTsend workflow. This processing will execute under a special low privilege identity called the
SMARTsend Application Account. The Application Account will be automatically created when
SMARTsend is installed and will result in a local Windows user account named FF_SMARTSEND_USER.
The password for the Application Account is also automatically generated with a 16 character randomly
generated password that exceeds the default complexity requirements in all versions of Microsoft Windows.
The name of the Application Account cannot be changed.
SMARTsend workflow. This processing will execute under a special low privilege identity called the
SMARTsend Application Account. The Application Account will be automatically created when
SMARTsend is installed and will result in a local Windows user account named FF_SMARTSEND_USER.
The password for the Application Account is also automatically generated with a 16 character randomly
generated password that exceeds the default complexity requirements in all versions of Microsoft Windows.
The name of the Application Account cannot be changed.
Setting the Password for the Application Account
If your organization has extremely strict password requirements and the automatically generated password
does not meet them or your organization policy requires that Administrators specify the passwords for all
system accounts, the password for the FF_SMARTSEND_USER account can be manually changed.
does not meet them or your organization policy requires that Administrators specify the passwords for all
system accounts, the password for the FF_SMARTSEND_USER account can be manually changed.
To set the password for the Application Account:
CAUTION:
Do not delete the SMARTsend Application Account (FF_SMARTSEND_USER) from the
Microsoft Management Console (MMC). If the account is deleted, the computer must be rebooted to re-
establish the SMARTsend Application Account. All credentials on the SMARTsend web site will become
invalid when the SMARTsend Application Account is deleted. Each user must go to Manage My Credentials
from the user home page and re-enter all of their passwords. All jobs will fail until the computer has been
restarted and the credentials have been re-entered.
establish the SMARTsend Application Account. All credentials on the SMARTsend web site will become
invalid when the SMARTsend Application Account is deleted. Each user must go to Manage My Credentials
from the user home page and re-enter all of their passwords. All jobs will fail until the computer has been
restarted and the credentials have been re-entered.
1
Go to the Microsoft Management Console on the SMARTsend computer and update the password for
the FF_SMARTSEND_USER account.
the FF_SMARTSEND_USER account.
N
OTE
:
In order for SMARTsend to function properly, if the password for the FF_SMARTSEND_USER is
changed by the Administrator, the new password must be created such that it complies with the effective
security policy for the operating system being used.
security policy for the operating system being used.