WorkCentre™ 5735/5740/5745/5755/5765/5775/5790System Administrator Guide165• Select [Locally on the Device] to validate users listed in the Local User InformationDatabase. This option requires you to configure accounts in the Local User InformationDatabase.• Select [Remotely on the Network] to validate users via an Authentication Server. Thisoption requires you to have a server that will provide authentication of user login details.Authentication via Kerberos (Solaris, Windows 2000), NDS (Novell), SMB (WindowsNT4/2000) or LDAP is supported.b. Select required method from the [Authorization] drop-down menu. The card reader andAuthentication Solution authenticates (validates) the user. The Authorization methoddetermines which areas of the device a user is allowed to access. There are two options:• Select [Locally on the Device]: if you want the device to check the Local UserInformation Database for levels of authorization.• Select [Remotely on the Network]: if you want to use an LDAP server to determinelevels of authorization.If you selected Remotely on the Network (from the Location of Access Rights box), configure LDAPcommunications as stated in the Configure Authentication for LDAP/LDAPS in the Authenticationsection of this guide.c. Check the [Automatically retrieve user’s e-mail address from LDAP] checkbox underPersonalization if you want to set the From address to the logged in user's e-mail addresswhen they log in via Secure Access.d. Click on the [Save] button to return to the Xerox Access Setup page.6. In the table displaying a list of related configuration setting pages, click the [Edit...] button on theXerox Secure Access Setup row.a. The Xerox Secure Access Setup screen displays. The device will automatically configure itselfto work with the XSA remote server. Click on the [Manually Configure] button if the XSAremote server does not configure automatically.b. In the Server Communication area, select either [IPv4 Address] or [Hostname].c. Enter details in the [IP Address: Port] or [Host Name: Port] fields.d. Enter the details in the [Path] field.e. Under the Device Log In Methods heading, select one of the following:• Xerox Secure Access Device Only (e.g., Swipe Cards - if you want to allow the user toswipe their swipe cards at the UI.• Xerox Secure Access Device + alternate on-screen authentication method - if youwant users to authenticate using the device’s control panel as well as the XSA feature.When the second option is enabled, a button labelled “Alternate Login” is displayed onthe “Instructional Blocking Window” providing users with an alternate method to log in.For example, this feature can be enabled for users who are unable to use their swipecard. When the alternate button is selected, the remote server presents a series of log inscreens on the local user interface. The remote server is still responsible forauthenticating the user. All other Xerox Secure Access options are supported with thissetting.f. Under the Accounting Information heading, note that this item will be grayed out ifNetwork Accounting is not enabled. If accounting is enabled, select [Automatically applyAccounting Codes from the server], if the Secure Access Server has been configured to
