› ControlSuite Clients › Unified Clients Overview › Kofax Unified Client for HP › Preparing for deployment › Authentication configuration

Authentication configuration

When used with Equitrac and Output Manager, the Unified Client for HP supports the following authentication methods:

  • Primary PIN
  • Secondary PIN
  • Alternate Primary PIN
  • User ID and password
  • Domain User ID and password
  • Card Id
  • User Name and password

In DRS, you can configure authentication as on or off.

  • When authentication is on, the following happens:

    • The Unified Client for HP (specifically with Equitrac or Output Manager) manages authentication to the device.

    • The Unified Client for HP becomes the top-level authentication provider over other embedded apps loaded on the device.

    • The Unified Client for HP is the default embedded application on the device. When the device is powered on or returns from sleep, the Unified Client for HP starts automatically.

    • After users log on, they go to device's Launcher screen.

    • When the user logs off from the device, the device screen returns to the first screen of the Unified Client for HP.

  • When authentication is off, the Unified Client for HP does not manage authentication, and another authentication provider must be used, such as Common Access Card (CAC) authentication. When you have logged on with CAC and clicked a Unified Client for HP button, you may be prompted to log on to AutoStore.

    HP provides additional fields when Authentication is Off with device authentication, CAC or Smart Card third-party authentication. The values for these fields come from the HP platform and are populated by the HP device. These values are not used by the Unified Client for HP. They are made available for customers to use custom authentication scripting when they need these values for their implementation. In this situation, customers must select Custom Authentication in AutoStore.

    The Unified Client for HP uses the HP-provided UserId and Domain to pass to AutoStore when configured with Windows and None authentication. For Windows authentication, the information is used for authentication. For None, these values are passed.

In addition to the DRS configuration setting, you can select one of these authentication configurations for AutoStore:

  • None. No log on is required.

  • Windows. If the user credentials are valid, no log on is required. If the credentials cannot be validated, the user is prompted to log on by specifying their user name, password, and domain.

  • Custom Script. Users can configure a script in AutoStore to perform custom validation. Any authentication prompts included in the script appear. CAC typically uses Custom Script authentication.

Note the following when using an administration user:

  • If you created an Equitrac or Output Manager user with the name "admin" to have administrator rights, it is handled differently by HP devices. If you log on as admin on a HP device, the device takes over authentication and prompts you for the device admin password. The device authentication does not communicate with ControlSuite.