Skip to content

Choose your language

  • No results

Choose your login

  • No results
Support

How can we help?

PaperCut's AI-generated content is continually improving, but it may still contain errors. Please verify as needed.

Lightbulb icon
Lightbulb icon

Here’s your answer

Sources:

* PaperCut is constantly working to improve the accuracy and quality of our AI-generated content. However, there may still be errors or inaccuracies, we appreciate your understanding and encourage verification when needed.

Lightbulb icon

Oops!

We currently don’t have an answer for this and our teams are working on resolving the issue. If you still need help,
User reading a resource

Popular resources

Help center

FAQs
Conversation bubbles

Contact us

Enable Unified Authentication in PaperCut MF and NG

This page applies to:

PaperCut NG PaperCut MF PaperCut Pocket PaperCut Hive

Last updated June 26, 2026

This page describes how to enable unified authentication, a single identity management platform that provides users with Single Sign-on (SSO) to access PaperCut MF and NG components. For a full description, take a look at Unified Authentication in PaperCut MF and NG.

Default unified authentication setting

The default setting depends on your environment. The setting is in Options > User/Group Sync > Unified Authentication section.

Deployment

Default setting

Admin action required?

User impact/experience

Fresh install
(v26.0.2 and later)

Share authentication session
(Unified Authentication)

No.
Active out of the box.

Single Sign-on experience across supported interfaces.

Upgrade
(from any version before v26.0.2+)

Authenticate separately (log in required for each interface/client)
(Existing behavior)

Yes (Opt-in).
To protect existing workflows and security baselines, the unified authentication flow is strictly opt-in. System administrators must manually enable session sharing if desired.

None by default. Existing login workflows and security are preserved until explicitly changed.

How to enable unified authentication

When upgrading from a version of PaperCut MF or NG that does not have unified authentication, to enable it:

  1. Log in to the PaperCut MF or NG Admin web interface.

  2. Go to Options > User/Group Sync.

  3. In the Unified Authentication section, select Share authentication session (login once).
    A message is displayed explaining that unified authentication will override any current user client authentication settings in Print Deploy and the PaperCut MF client.

    Screenshot of the Unified Authentication area of the user/Group Sync tab in PaperCut MF

How to override unified authentication for PaperCut client logins

When unified authentication is enabled, clients are directed to the browser-based interface to log in.

However, if you want the PaperCut client to use the existing dialog prompts that prompt them to enter their username and password or PIN, you can override the unified authentication login method for the PaperCut client.

For example, you would override unified authentication in environments where browsers are unavailable or locked down, or when you don’t want to disrupt existing user behavior.

To override unified authentication for PaperCut clients:

  1. In the admin web interface, go to Options > General, and scroll down to Client Software.

  2. Under Authentication Method, select Client-specific. If you can’t see this option, it’s not enabled. Go to How to enable unified authentication above.

    Screenshot of the Client Software section of the Overview page, showing the Client-specific option selected.

  3. Select Apply.

Now all login requests from web clients, the PaperCut client, and Print Deploy clients use the unified authentication flow. The user login process remains the same.

How to allow users to authenticate using a PIN and/or Card ID via the web-based login interface

When Unified Authentication is enabled, you can allow users to authenticate using a PIN and/or Card ID instead of a standard username and password on the web login interface.

If you want to maintain the convenience of PIN/ID-based logins for the new unified web login page, you can manually adjust two advanced configuration keys in the Advanced Config Editor. Update the configuration keys as follows:

Desired login method

Config key:
auth.web-login.card-id.enable

Config key:
auth.web-login.card-id.pin-required

Username & Password only (Default)

N

N

PIN / Card ID only

Y

N

PIN + Card ID (Both required)

Y

Y

Alternatively, if you use the client-specific option (to override Unified Authentication for PaperCut client logins), the existing client-specific settings are honored and the existing client login pages are used instead of the unified web-based login.

Comments