User authentication identifies users and then associates their identity with the print job. Jobs appear in the server’s print queue with this user identity.
For all devices except Windows laptops, the Application Server validates the username and password in real-time (for example, via Active Directory, LDAP, or G Suite) prior to receiving a print job. The same applies for user security (for example, group-based access control).
For Windows, the authentication process is:
At the time of installation of the print queue, the Application Server validates the username and password.
If valid, the Application Server returns to the client an IPP URL with an encoded access token.
A standard Windows IPP printer is automatically created using this special URL.
The client uses this URL to deliver print jobs via IPP.
Every time there is a print job, the Mobility Print server validates the access token.