Active Directory® Integrated

Environment
SIICA
February 2016
Benefits of the AD Integrated Environment
 Secure and trusted user authentication and network
communication
 Single-Sign-On to network resources via secure token
 Seamless user access to:
 Scan to network folder
 Scan to home directory
 Scan to email
 Active Directory user authentication for printing
 Enhanced printer management using Active Directory
 What’s New
1. Active Directory Registration – MFP to Join Domain
2. Active Directory Authentication
3. ID Card Settings for Active Directory Authentication
4. Single-Sign-On to Active Directory Resources
5. Printing in the Active Directory Integrated
Environment
1. AD Integration – MFP to Join Domain
BEFORE NOW
Active Directory Active Directory
Managed Resources Managed Resources
Computers MFPs and Printers
Computers

MFPs and Printers

People
People

Folders
Folders

Seamless & Trusted

Limited & Inconvenient
 2. Active Directory Authentication
New and stronger user authentication
against Active Directory Active Directory Authentication MFP Screen

User Authentication Options:

 Login Locally
Authentication performed using a user list created and stored
locally on the MFP
 LDAP Authentication
Authentication performed against the LDAP server
 Active Directory Authentication New!
Authentication performed against the Active Directory server,
which allows Kerberos token-based authentication with stronger
security
 3. ID Card Authentication
A simple ID card authentication in the
ID Card Authentication MFP Screen
AD integrated environment
 ID Card Authentication
 ID card only
 ID card or manual input
 Implementation Options
Convenience Mode (Credentials are stored on a MFP)
» ID card swipe to login
 Secure Mode (Only user name and ID card information are stored)
» ID card swipe and manual password entry Please discuss security policy with customer’s IT
 ID Card Self-Registration department to implement desired user
authentication method.
 Users to register their ID card at the first time logon to a MFP
 1,000 ID card registrations are supported per MFP
 4. Single-Sign-On (SSO) to AD Resources
Once authenticated, users can Home Directory: Pre-populated default destination
Single-Sign-On to AD resources
 Scan to Folder
User name and password are not required to access network folders
from the MFP.
 Scan to Home Directory Easy Scan
Secure and facilitated access to home directory. Scan to home
directory can be set as a default destination.
 Scan to Email
The MFP obtains logged in user’s email address from Active Directory Scan to Me: Pre-populated default destination
and establishes scan to me workflow. The logged in user’s e-mail can
be set as a default destination.
 SSO to Cloud Connect
Single-Sign-On to the “Cloud Connect” feature is established via Active
Directory authentication.
 Scan Restrictions
Limited destinations such as “scan only to home directory” or “scan only Easy Scan
to logged-in users e-mail address” as well as domain and destination
entry restrictions can be applied to help minimize information leakage.
 5. Printing In the AD Integrated Environment
Print Driver: Authentication Settings (Windows)
 Required stronger authentication for printing
 User name and password are required in order
to print
 Print jobs sent to the MFP will be authenticated
 MFP accepts only the jobs which are submitted
by valid users managed in Active Directory Note: Registered user name and password on the print driver are encrypted.

 Enables Active Directory and ID card MFP Operation Panel Print Release Interface
authentication for “Server-less Print Release”
 Available on Windows®, Mac®, and select mobile
printing applications including Sharpdesk®
Mobile
SHARP ELECTRONICS CORPORATION
Sharp Plaza, Mahwah, NJ 07495-1163
1-800-BE-SHARP • www.sharpusa.com

Document Number 16050

©2016 Sharp Electronics Corporation. All rights reserved.

Design and specifications subject to change without notice. Sharp, Sharpdesk, Sharp OSA and all related trademarks are trademarks or
registered trademarks of Sharp Corporation and/or its affiliated companies. Microsoft, Windows, and Active Directory are registered
trademarks of Microsoft Corporation in the United States and/or other countries. All other trademarks are the property of their respective
holders.