Mobile Single Sign‑On

Mobile Single Sign-On or Mobile SSO is a feature that allows the use of the organization's authentication token to access the LPM system. This feature reduces the number of times that a user has to log in when printing. This feature is supported only in the Android Print Plug‑in application.

Configuring SSO with the mobile plug‑in

Apply the following configuration in the plug‑in application:

<?xml version="1.0" encoding="UTF-8"?>​

<config>

  <providers>
    <provider>
      <name>Prem Mobile SSO</name>
      <address>10.100.101.11></address>
      <providerType>server-premise</providerType>
      <auto‑discover>true</auto‑discover>
    </provider>
  </providers>

  <premise‑server‑config>
    <sso‑url>orcton.eastasia.cloudapp.abc.com</sso‑url>
    <sso‑client‑id>clientid</sso‑client‑id>
  </premise‑server‑config> 

   <behavior
    <import-configList>reset_all/<import-configList>
  </behavior>

</config>
Notes: <address>—Type the server IP address of the load balancer.

As an administrator, introduce the following settings in Lexmark Print configuration file to hide the Logout option:

  <settings>
    ...
    <hide‑logout>true</hide‑logout>
  </settings>
Notes:
  • Set the value to true to hide Logout option.
  • This setting is not dependent on AD FS settings.
  • By default, the Logout option is shown.
  • The plug‑in application imports the new configuration settings.

AD FS Management Console​

Notes:
  • While creating a client‑server application, select Server application or Server application accessing a web API.
  • In the Redirect URL field, type lxkmobile://plugin.callback.

Print Management Console Settings

  1. Click on the upper‑right corner of Print Management Console.

  2. Configure the ADFS and LDAP server settings:

    For ADFS Settings:

    1. Type the server address of the ADFS server.

    2. Import the SSL certificate for LPM to communicate to the ADFS server.

    3. Click Save Changes.

    For LDAP Settings:

    1. Click Add.

      Note: If the AD FS points to an existing Active Directory as the LDAP entry, then there is no need to follow the next steps.

    2. Configure the server details.

      Note: In the LDAP settings, add the Active Directory that the AD FS points to.

    3. Click Save Changes.