The main purpose of google cloud directory sync is to: (choose one option below)
The Azure AD provisioning service monitors the health of your configuration and places unhealthy apps in a "quarantine" state. If most or all of the calls made against the target system consistently fail because of an error, for example, invalid admin credentials, the provisioning job is marked as in quarantine. While in quarantine, the frequency of incremental cycles is gradually reduced to once per day. The provisioning job is removed from quarantine after all errors are fixed and the next sync cycle starts. If the provisioning job stays in quarantine for more than four weeks, the provisioning job is disabled (stops running). Learn more about applications provisioning in quarantine status within Azure AD. Show
Adobe’s service independently monitors sync health to verify when the error rate surpasses a certain threshold in a set amount of time. A minimum number of requests resulting in an error that meets the threshold will enact temporary quarantine, resulting in rejecting all calls and update requests from Azure AD for a time period, after which calls will be accepted again for sync retry. If error calls persist, the sync will be placed on temporary probation for an extended time period in quarantine. If Adobe initiates the quarantine, it may also lead to a subsequent quarantine with Azure due to the rejected calls, which will count toward error rates in Azure. Note that Adobe reserves the right to update the quarantine parameters based on ongoing data analytics. An Application Server is the primary server program responsible for providing the PaperCut user interface, storing data, and providing services to users. PaperCut uses the Application Server to manage user and account information, manage printers, calculate print costs, provide a web browser interface to administrators and end users, and much more. to Google Cloud Directory.NOTE Both Google Workspace and Google Cloud Identity use Google Cloud Directory to synchronize users and groups. Environments with Google Cloud Directory as a user sync source are cost effective and quick to implement because they use Mobility Print and PaperCut NG/MF for end-to-end print requirements, including authentication, reporting, filtersFilters allow you to control attributes of the print settings by either forcing a particular attribute or denying a a print job that does not meet specific criteria. There are two types of print filters: conversions and restrictions., and restrictionsRestrictions are a type of print filter that ensures jobs meet certain criteria (denying those that don't). For example, you can restrict access to one or more printer, define a maximum number of pages allowed in a single job, or allow only duplex.. All you need to do is make sure users can access your WiFi. There's no need to set up or manage a domain (for example Active Directory) or deal with the complexities inherent in managing multiple printer drivers (OSs, multiple vendors, multiple models, etc.). If you don’t want users to access your network, Google Cloud Directory still works with Web print, Email to print and Google Cloud print. Examples of Google Cloud Directory environmentsA pure Google Cloud Directory environmentInstall PaperCut NG/MF in a pure, Google Workspace-only environment. An existing directory is going to be replaced with Google WorkspaceIf your current environment uses an on-premises directory, for example Active Directory (AD), and you want to replace it completely with Google Cloud Directory, then you first need to migrate all users from your current directory into Google Workspace. If you prefer, you can do this in stages over a period of time and run a hybrid environment until the full migration is finished. Keep the original directory until you’ve completed and tested the entire new Google Cloud Directory setup. An existing directory and new Google Cloud Directory are both going to be synced with PaperCut NG/MFYou can sync PaperCut NG/MF with two user directory sources, one being a traditional directory such as Active Directory and one being a new Google Cloud Directory. You can even sync directories from two Google Cloud Directories. You set up one directory as the primary sync source and one as the secondary sync source. IMPORTANT If the username for an internal user is the same as a Google Cloud Directory username (without the domain part), then PaperCut NG/MF will convert the existing internal user to a standard PaperCut NG/MF user and merge the data. If there are discrepancies in the data in the existing internal account and Google Cloud Directory, the Google Cloud Directory information will override the existing internal user information. Set up at a glanceThe high-level process to set up Google Cloud Directory authentication is as follows:
Step 1: Set up your Google Workspace or Google Cloud Identity usersIn Google, depending on your planned environment:
Step 2: If not already done, set up your printing solutionIf you haven't already set up a printing solution, select and set up the solution that best suits your environment:
Step 3: Set up LDAP access and permissions for Google Workspace or Google Cloud IdentityNOTE Remember, this functionality is available for organizations using G Suite Education, G Suite Enterprise for Education, G Suite Enterprise, and Cloud Identity Premium. IMPORTANT Before you start, make sure you can log in to Google as a Super Admin.
NOTE This adds PaperCut NG/MF to the list of permitted LDAP clients. You can find more information about configuring access permissions from Google. NOTE The service status, displayed at the top right of the screen, is initially set to OFF. NOTE Depending on the size of your organization, it can take up to 24 hours for Google Cloud Directory changes to apply. Step 4: Set up Google Workspace or Google Cloud Identity sync in PaperCut NG/MFSet up the primary sync source
(Optional) Set up the secondary sync sourceHow usernames are handled when syncing from two sourcesA secondary sync source allows you to import users and groups from a second independent external directory source into PaperCut NG/MF. PaperCut NG/MF treats Google Cloud Directory usernames as globally unique—if the same username exists in both the primary and secondary sync sources, it generates only a single user. When PaperCut NG/MF merges the user’s details from both sync sources, it prioritizes the primary sync source details, and then adds any additional details that are in the secondary source. The priority that PaperCut NG/MF enters details into the Card/Identity Numbers and Other Details fields for the Primary and Secondary fields is:
When you sync, the source details always overwrite what’s already inPaperCut NG/MF. PaperCut NG/MF will retain the details in the fields that are not changed in the sync source. If at a later time you stop using the primary or secondary sync source, or if a Google Workspace or Google Cloud Identity field becomes blank, PaperCut NG/MF will still retain the details in the fields. Set up the secondary sync source
OR,
TIP There are 2 types of values in Google Cloud Directory's fields when you add custom attribute fields to users. They can be either Whole numbers or Text. Choose carefully. This is managed on the Google Admin's dashboard by navigating through (menu on the left) Directory > Users > (top right) More > Manage custom attributes. NOTE Sys Admins can use the number to search for users on the User List page. For more information refer to User card and ID numbers. Scroll down and click Test Settings. PaperCut NG/MF displays the progress of the test and the results in the Testing sync settings popup. Review the results to make sure all the expected users are there; then click Close. Click Apply. Set up the Sync OptionsWhereas the sync source(s) you specified above determine where PaperCut NG/MF imports users from, the Sync Options section lets you make choices about what happens during the sync itself. The options you select in this section:
Test your new print environmentTest the end-to-end printing experience on all interfaces to make sure it matches what you intended. TIP Work with real users and get their feedback on their experience. If you are not going to set up Google Single sign on, then that’s it! Step 5: (Optional) Set up Google Single sign on(Optional) Manage Google Single sign on for ChromebooksBy default there will be a Sign in with Google button on Chromebooks so users do not have to re-enter their credentials to log in to PaperCut NG/MF. If in your environment there are user accounts that do not have Gmail email addresses or Gmail accounts, you might want to consider turning off Single sign on. If you don’t, these users might click the Sign in with Google button and not be logged in because their account won’t be registered in PaperCut NG/MF. To turn off Single sign on for Chromebooks:
(Optional) Set up Google Single sign on for Admin and User web interfacesGoogle Workspace users can always log in to Chromebooks or PaperCut NG/MF Admin or User web interfaces by typing their Google credentials in the Username and Password fields. However, if you set up Google Single sign on, users who have already logged in to their Chromebook or Google account in a browser will not need to re-enter their credentials to log in toPaperCut NG/MF. The Username and Password fields will still show on the login screen, but there will also be a Sign in with Google button for users to click instead. Create the client secret JSON file in Google Workspace
Set up Google Single sign on (Sign in with Google) in PaperCut NG/MFThis part of the interface is for setting up Sign in with Google on the PaperCut NG/MF Admin web interface and User Web interface. You set up Single sign on for Mobility Print via the link at the bottom of this section.
|