[Edit Basic Settings] Screen

[User Management]

[Authentication Management]

[Basic Settings]

[Edit] to display the [Edit Basic Settings] screen.
Use this screen to enable and disable user authentication, specify the login method, and configure the basic settings for user authentication.

[Use of Authentication Function]

[Use the user authentication function]

Select this checkbox to use user authentication.

[Authentication Functions to Use]

Select the checkbox for the login method that you want to use.
Configure the settings in [Authentication Settings], according to the selected login method.

* The [Keyboard Authentication] checkbox is automatically selected when you select the following checkboxes:

[Mobile Authentication]

[Picture Login]

[Authentication Settings]

Configure the required settings when using each login method and other authentication functions.

[Picture Login]

If you selected [Picture Login] in [Authentication Functions to Use], configure the settings for the user registration method and login screen for Picture Login.

[User Registration Method]

Select the method for registering users who use Picture Login to the machine.

When Registering Users Automatically

Select the [Register Automatically When Job Is Received] checkbox to register users automatically from a computer by using the user information of held print jobs in the machine.
To include the domain name and computer name in the user name to be registered, select the [Add Domain Name to User Name to Be Registered] and [Add Computer Name to User Name to Be Registered] checkboxes.

When Registering Users Manually

Select the [Register Manually from Settings Menu] checkbox.

[Display Administrators]

Specify whether to display the users with administrator privileges on the login screen.
If this is set to not display administrators, users with administrator privileges must enter their user name and password when logging in, reducing the risk of unauthorized login.

Select the [User with Administrator Role] checkbox to display users with Administrator privileges.

Select the [Administrator] checkbox to display "Administrator" users registered by default.

[Change Default Display for Picture Login Screen]

Select the order in which users are displayed on the login screen.

[Always Require PIN/Pattern]

To require a PIN or pattern when logging in. select the [On] checkbox, and then select the [Use PIN] and/or [Use Pattern] checkbox.

[Allow User to Change PIN/Pattern Using Print Job from Same User]

Set whether to allow the user to reset the PIN or pattern by sending a job, if the user repeatedly enters an incorrect PIN or pattern. When this checkbox is selected, the machine displays a confirmation screen asking whether to reset the PIN or pattern.

* This can be specified only when the [Register Automatically When Job Is Received] checkbox is selected in [User Registration Method].

[Allow User to Change PIN/Pattern with New PIN/Pattern Received by E-Mail]

Set whether to send a new PIN or pattern to the user's e-mail address if the user repeatedly enters an incorrect pattern or PIN, so that the user can log in. When this checkbox is selected, the machine displays a confirmation screen asking whether to reset the PIN or pattern.

* This is enabled only when an email address is registered for the user.

[Keyboard Authentication]

If you selected [Keyboard Authentication] in [Authentication Functions to Use], configure the settings for the authentication system and login screen for keyboard authentication.

[Authentication]

Select the authentication system of the user.
To use an external authentication server, select the [Server] checkbox and select the server type.

[Number of Caches for Login Users]

Displays the user login history in a dropdown list on the login screen. Select "0" to not display this history, and select "1" to display only the history of the most recently logged in user.

[Display Button on Settings Menu]

Select this checkbox to enable the user to change the password with [

Menu] at the top right of the login screen.

[Use Numeric Keys for Authentication]

Select this checkbox to enable login using only the numeric keys when the user name and password consist only of numbers.

[Restrict Password Reuse]

Select this checkbox to restrict the reuse of passwords that have been used in the past (passwords stored in the history), and enter the number of passwords to be stored in the history.

[Set Password Change Prohibition Period]

Select this checkbox to set a period in which to prohibit password changes, and enter the number of days for the prohibition period.

* This setting can be configured only when the [Restrict Password Reuse] checkbox is selected.

[Remote UI Authentication]

[Authentication Mode]

Select the authentication mode to use when logging in to Remote UI.

To allow all users including unregistered users to log in as a general user, select [Guest Authentication Mode].

To allow only users with administrator privileges to log in, select [Administrator Authentication Mode].

[Always Require Two-Factor Authentication]

To require users to enter a one-time password (two-factor authentication) when they log in to Remote UI, select [All users] or [Administrators Only] as the users to which this applies.

[Other Authentication]

[Web Service Authentication Method]

Select the local device authentication method to use when communicating with Web service applications.

* The selected authentication method is also used when performing user authentication during device information distribution. Performing User Authentication When Receiving the Device Information

[Integrated Authentication]

[Disable integrated authentication]

Integrated authentication is a function that enables the authentication information used when logging in to be used when logging in at other times. Authentication is valid during the period the session is valid. Select this checkbox to disable integrated authentication.

To disable integrated authentication using credentials for local device authentication and LDAP server authentication, select the [Disable integrated authentication using credentials for local device authentication] and [Disable integrated authentication using credentials for LDAP server authentication] checkboxes.

To enable operation of the following folders and Advanced Box when integrated authentication is disabled, register a separate user name and password:

Personal Folder

LDAP server

Shared folder, FTP Server, or WebDAV server

Advanced Box

[Other Settings]

[User Recognition Settings]

[Match Case for User Name]

Select this checkbox when using case-sensitive user names.

* It is recommended to configure this setting together with the setting for determining users for print data. [Match Case for User Name]

[Allow Use of @ in User Name]

Select this checkbox to allow use of the at sign (@) in the user name.

[User Group Management Settings]

[Use department ID as user group]

Select this checkbox to use a Department ID as a user group. Sharing Destinations in a Group (User Group)

[Department ID Settings for Users]

[Automatically set the department ID at user registration]

Select this checkbox to register a Department ID automatically and assign it to a user when registering and editing users with Remote UI.

The Department ID is registered and assigned automatically in the following cases:

If the user name is a number of seven digits or less, that number is registered and assigned as the Department ID.

If the password registered to the user is a number of seven digits or less, that number is assigned as the Department ID PIN.

If the user name and password do not meet the above conditions, a sequentially numbered Department ID starting from "0000001" is registered and assigned in order. A PIN is not assigned.

A restriction on the number of pages is not set.

The Department ID is not registered and assigned automatically in the following cases:

When a user is registered or edited on the control panel

When a user with an assigned Department ID is registered or edited

When 1,000 Department IDs are already registered

When 1,001 or more users are already registered

When a user is registered automatically using [Register Automatically When Job Is Received] in Picture Login

[Automatically Delete Department ID at User Deletion]

Select this checkbox to automatically delete the Department ID assigned to a user when the user is deleted.

The total counter information linked to the Department ID is also deleted.

If multiple users are registered to the Department ID, it is not automatically deleted.

[Set Default Role]

[Default Role When Registering User]

Specify the role that is initially selected by default when a user is registered.

* This setting is also applied in situations such as when no privileges are set in the imported user information.

[Setting Changes by Users Without Administrator Privileges]

[Allow e-mail address settings]

Select this checkbox to enable users without Administrator privileges to specify their own e-mail addresses in their user accounts.

[Device Settings]

[Functions to Restrict]

Select the checkboxes of functions that are not allowed to be used when using user authentication.

[Auto Delete Users]

[Delete users that have not logged in for the specified period]

Select this checkbox to automatically delete users registered in the local device who have not logged in to the machine for a specified period of time. In [Auto Delete After] and [Auto Delete Time], enter the number of days from the last login date until the automatic deletion is performed, and specify the time at which to perform deletion.

These settings do not apply to the "-----" user registered by default and the administrators with Administrator privileges.

If you set [Auto Delete After] to [0] days, all users are deleted at the time specified in [Auto Delete Time] (excluding users who are not subject to automatic deletion).

If a user has never logged in before, the machine handles the registration date of the user as the last login date.

If the user cannot be deleted automatically because the power of the machine is OFF or the machine is in Sleep Mode, the user will be deleted after the machine is turned ON or has recovered from Sleep Mode.

[Communication Mode for Kerberos Authentication Settings]

Select the communication method used for Kerberos authentication.