6 Admin Guide ~upd~ | Ysoft Safeq

YSoft SafeQ 6 Administrator Guide: Complete Walkthrough for Enterprise Print Management

2. User Import & Synchronization (The "Domain" Tab)

SafeQ 6 relies heavily on proper user synchronization.

• Import Providers: You typically connect to Active Directory (AD) or an LDAP server.
• Synchronization Types:
  • Full Sync: Synchronizes all users and structures. Good for initial setup.
  • Delta Sync: Only updates changes (additions/removals). Schedule this to run every 15–60 minutes for performance.
• Advanced Mapping: If your AD structure is messy, use the User Identification settings to map users by specific attributes (e.g., sAMAccountName or employeeID) rather than just email.
• Guest Users: Configure specific import rules for guest networks or temporary users who do not exist in the main AD.

8.2 Single Sign-On (SAML)

Integrate with Azure AD / Okta:

1. System > Authentication > SAML → Enable.
2. Enter IdP metadata URL (e.g., https://login.microsoftonline.com/.../saml2).
3. Map SAML attributes: nameID → Username, email → Email.
4. Set Auto-provision users from SAML.

2.2 Network Prerequisites

• Static IP for SafeQ Server.
• Firewall open: TCP 443 (Admin UI), 8080 (Terminal communication), 25/587 (email), 389/636 (LDAP), 9100 (raw printing).
• Time synchronization (NTP) – critical for authentication.
• Access to printers via SNMP v2c/v3 (for inventory and status).