Xerox Xerox Secure Access Unified ID System Support & Software 管理员指南
Configuration & Management
Xerox Secure Access Administration Guide
35
You can choose to import added or changed users, or remove inactive accounts from the Secure
Access database. Leave these settings at the default to ensure the accounts are updated and kept
in sync with the Active Directory server.
Access database. Leave these settings at the default to ensure the accounts are updated and kept
in sync with the Active Directory server.
6. The Assign Values from Active Directory attributes save you time and effort by assigning
particular attributes to all users within the selected container. Note that you should enter the
Active Directory attribute name, not the field label. Although you can update individual user
accounts later on, choose these attributes before you import to speed up account creation.
The Primary PIN and Secondary PIN attributes map the numeric PIN values found on the Active
Directory server to the Primary PIN and Secondary PIN fields in Secure Access. Check the
Secondary PIN value if you want to import these fields, which the user can enter on the MFP front
panel (a secondary prompt is like a password that adds another layer of security) if the Secondary
prompt is enabled in Configuration > User Authentication Device Settings. Type the attribute
name for both the PIN1 (typically the card number) and the PIN2 fields that is used on the Active
Directory server.
The Primary PIN and Secondary PIN attributes can also map email address.
Active Directory attribute name, not the field label. Although you can update individual user
accounts later on, choose these attributes before you import to speed up account creation.
The Primary PIN and Secondary PIN attributes map the numeric PIN values found on the Active
Directory server to the Primary PIN and Secondary PIN fields in Secure Access. Check the
Secondary PIN value if you want to import these fields, which the user can enter on the MFP front
panel (a secondary prompt is like a password that adds another layer of security) if the Secondary
prompt is enabled in Configuration > User Authentication Device Settings. Type the attribute
name for both the PIN1 (typically the card number) and the PIN2 fields that is used on the Active
Directory server.
The Primary PIN and Secondary PIN attributes can also map email address.
7. Click Import to immediately begin the import task for the first time. The Import task runs in the
background, and may take a few minutes depending on the size of the Active Directory you are
importing.
importing.
8. You can click OK to exit the dialog. The task will continue to run even though the dialog is closed.
9. After a few minutes, refresh Secure Access Manager, then check the list of Users to ensure
9. After a few minutes, refresh Secure Access Manager, then check the list of Users to ensure
successful import of the accounts. Also open the properties for a user account and ensure that the
settings are correct.
settings are correct.
Adding Users from A Flat File Import
Use the SACmd.exe utility to add, delete, modify and query user accounts from a flat file.
Note:
This method is a one-time import and does not synchronize data beyond the import.
Secure Access installs this utility by default on the authentication server in the directory: Program Files
> Xerox >Secure Access > Tools.
> Xerox >Secure Access > Tools.
The command-line utility accepts commands in the following format:
SACmd -s(Server) (Action) (Obj_ID)| [(Options)]
Example: -sTestServer add user1 "John Smith" johns@here.com pin1 pin2
Example: -sTestServer add user1 "John Smith" johns@here.com pin1 pin2
Execute the command with a batch file:
SACmd -s(Server) -f(BatchFile)
SACmd Batch File Process
SACmd has a batch mode and accepts a CSV file as a batch file (one file per server). Batch operation
allows all the command actions except for query command.
allows all the command actions except for query command.
Note:
Copy the .csv file to the Secure Access > Tools folder.
[Secure Access\Tools file path]\SACmd –s(Server) –f BatchFileName.csv
CVS file format:
(Action), (Obj_ID)|All, [(Details)]