Save Card Number and ID code on Active Directory

1. Introduction
2. How to…
   1. Specify the AD Field to Store the Card Number/ID Code
   2. Make Celiveo Save the Card Number/ID Code in AD

Introduction

In the article on Enabling Card Authentication, and Enabling ID Code Authentication, the Card Number and PIN were stored in the Celiveo Database (CeliveoDB). If required, you can store this information directly on the Active Directory (AD). However, the AD does not have field that corresponds to the Celiveo specific Id Code field, which is where the ID Code and Card Number is stored. As such, the Celiveo specific Id Code must be mapped to an unused field on AD.

How to…

Specify the AD Field to Store the Card Number/PIN Code

1. Display an Authentication Profile that uses ID Code authentication or Card authentication.
   
   1. On the Celiveo Web Admin, at the main menu, click . The Printer List displays.
   2. Select a Printer that uses Card authentication or ID Code authentication.
   3. On the printer menu, click . Access and Rules is displayed.
      
   4. Click . The Access & Rules Profile displays.
      
   5. In the Access Control Rules section, select the Access Control Rule and click . The Rule Definition
      
   6. Click located next to the [Source] drop-down.
      
   7. Select the Authentication Profile and click . The Authentication Profile displays.
      
2. Click [Advanced]. The screen expands to show the advanced properties.
   
3. In the [Id Code Field Name] drop-down select the AD field to store the PIN Code or Card Number.
4. Click [Save].
   

*Note: When using AD enrollment with SHA256 ID conversion, the field where the ID is stored needs to have a minimum length of 64.

!IMPORTANT: It is recommended to index the AD attribute(s) where the user IDs are stored (card number, PIN code) so that live user authentication against AD is faster. By default the primary user ID attribute is stored in postOfficeBox.

Make Celiveo Save the Card Number/PIN Code in AD

1. Display the Authentication Source profile of a printer (See steps 1 – 6) in previous procedure.
   
2. Click located next to [Self-Enrollment].
   Note: The settings button ( ) is visible only when [Self-Enrollment] is turned on.
3. Select [AD/LDAP].

Self Enrollment (PIN Authentication)	Self Enrollment (Card Authentication)

4. Click [Close].