Authentication configuration

When used with Equitrac and Output Manager, the Unified Client for Lexmark supports the following authentication methods:

  • Primary PIN
  • Secondary PIN
  • Alternate Primary PIN
  • User ID and password
  • Domain User ID and password

In DRS, you can configure authentication as on or off. Depending on this configuration, the following happens:

  • When authentication is on, the following happens:

    • The Unified Client for Lexmark (specifically with Equitrac or Output Manager) manages authentication to the device.

    • The Unified Client for Lexmark becomes the top-level authentication provider over other embedded apps loaded on the device.

    • The Unified Client for Lexmark is the default embedded application on the device. When the device is powered on or returns from sleep, the Unified Client for Lexmark starts automatically.

    • After users log on, they go to device's Home screen or Welcome screen.

    • When the user logs off from the device, the device screen returns to the first screen of the Unified Client for Lexmark.

  • When authentication is off, the Unified Client for Lexmark does not manage authentication, and another authentication provider must be used, such as Common Access Card (CAC) authentication. When you have logged on with CAC and clicked a Unified Client for Lexmark button, you may be prompted to log on to AutoStore.

    Lexmark provides additional fields when Authentication is Off with device authentication, CAC or Smart Card third-party authentication. The values for these fields come from the Lexmark platform and are populated by the Lexmark device. These values are not used by the Unified Client for Lexmark. They are made available for customers to use custom authentication scripting when they need these values for their implementation. In this situation, customers must select Custom Authentication in AutoStore.

    The Unified Client for Lexmark uses the Lexmark-provided UserId and Domain to pass to AutoStore when configured with Windows and None authentication. For Windows authentication, the information is used for authentication. For None, these values are passed.

In addition to the DRS configuration setting, you can select one of these authentication configurations for AutoStore:

  • None. No log on is required.

  • Windows. If the user credentials are valid, no log on is required. If the credentials cannot be validated, the user is prompted to log on by specifying their user name, password, and domain.

  • Custom Script. Users can configure a script in AutoStore to perform custom validation. Any authentication prompts included in the script appear. CAC typically uses Custom Script authentication.

Note the following when using an administration user:

  • If you created an Equitrac or Output Manager user with the name "admin" to have administrator rights, it is handled differently by Lexmark devices. If you log on as admin on a Lexmark device, the device takes over authentication and prompts you for the device admin password. The device authentication does not communicate with ControlSuite.

The Unified Client for Lexmark resets if authentication has been idle for one minute.