Before Logging in to SSO-H Management Application

SSO-H is an authentication system that runs on the machine. It is necessary to specify the following settings in the machine to use SSO-H for authentication.

Specifying the Various Settings

Network Settings

Set the items in [Network] in [Preferences] (Settings/Registration). Also, confirm the machine's IP address. For more information, see "Protocol Settings."

Date and Time Settings

When using SSO-H, it is necessary to synchronize the date and time settings of the authentication server and machine. Set the date and time of the machine in [Date/Time Settings] in [Preferences] (Settings/Registration) to the same date and time set on the authentication server. For more information, see "Current Date and Time."
You can also specify daylight saving settings to automatically advance the standard time of the machine forward by one hour for a certain period each year.

DNS Settings

Set the machine to use a DNS server in [Network] in [Preferences] (Settings/Registration). For more information, see "Protocol Settings."
The DNS server that manages the domain name registered in the machine requires the following:
The domain name of the Active Directory server used for authentication (the IP address of the domain controller) must be able to be retrieved.
The DNS server must support SRV records.
The following settings are required if the port number used for LDAP on the Active Directory side is changed.
Information for the LDAP service of Active Directory must be registered as an SRV record as follows:
Service:
'_ldap'
Protocol:
'_tcp'
Port number:
The port number used by the LDAP service of Active Directory
Host offering this service:
Host name of the domain controller that is actually providing the LDAP service of the Active Directory domain (zone)

Department ID Management Settings

Department ID Management must be set to 'Off' before using SSO-H. For more information, see "Department ID Management."

Language Settings

Check the language settings of Active Directory and the machine. If the display language of Active Directory and the machine differ, the sender's full name will not be displayed in the destination for e-mail.

IMPORTANT
To specify [Management Settings] (Settings/Registration), you must log in using the System Manager ID and the System PIN.
You cannot connect to the machine via a proxy server. Specify the following settings if you are working in an environment using a proxy server (as these settings differ, depending on the network environment, contact your network administrator).
In the proxy server settings of your web browser, enter the IP address of your machine in the [Exceptions] (addresses that do not use a proxy) list.
Only enter characters in your web browser that can also be entered from the touch panel display of the machine. Otherwise, the characters you enter from your web browser may not be displayed or recognized correctly on the touch panel display.
You cannot use SSO-H if your web browser is not set to enable cookies, JavaScript, and JavaApplet.
If the date and time settings of the authentication server and machine are not synchronized, a login error will occur when using Domain Authentication.
NOTE
The allowed difference in times can be changed using the settings of Active Directory. However, if more than '5' minutes is specified, the allowed difference will not be changed.
If Department ID Management is set to 'On', a warning message will be displayed on the login screen.