Skip to content

Choose your language

  • No results

Choose your login

  • No results
Support

How can we help?

PaperCut's AI-generated content is continually improving, but it may still contain errors. Please verify as needed.

Lightbulb icon
Lightbulb icon

Here’s your answer

Sources:

* PaperCut is constantly working to improve the accuracy and quality of our AI-generated content. However, there may still be errors or inaccuracies, we appreciate your understanding and encourage verification when needed.

Lightbulb icon

Oops!

We currently don’t have an answer for this and our teams are working on resolving the issue. If you still need help,
User reading a resource

Popular resources

Help center

FAQs
Conversation bubbles

Contact us

Configure Sign in with Microsoft (Single Sign-On)

This page applies to:

Last updated November 11, 2025

Introduction to Microsoft SSO

You can enable Sign in with Microsoft in multiple areas of PaperCut NG/MF, such as Print Deploy, and when logging into the PaperCut admin and user web interfaces.

If you have an existing PaperCut NG/MF installation, this can be a complex implementation. However, it is simpler to configure this during a new PaperCut NG/MF installation.

Requirements

Before you start, ensure you meet the following requirements:

  • an Entra ID tenant.
  • the user in PaperCut NG/MF is configured with an email address that matches the UserPrincipalName (UPN) of the corresponding user in Entra.

Microsoft SSO for Admin and User web interfaces

Microsoft 365 users can log in to the PaperCut NG/MF admin interface or User web interface using their Microsoft credentials in the Username and Password fields.

After Entra SSO is set up as shown below, users and admins will see the familiar Sign in with Microsoft button, with a link underneath to log in using their username and password instead.

1. Create an enterprise application

  1. Sign in to the Entra Portal .

  2. Under Home, expand Entra ID and select App registrations..

  3. At the top of the new page, click New registration. The application creation screen is displayed.

  4. Set the type to Web,.

  5. In the Redirect URI (optional) field, enter your server’s call back URL.

  6. Click Register to create the application. The application’s Overview page is displayed.

  7. Copy the Application (client) ID and save it for the PaperCut NG/MF configuration.

  8. After creating your application, Microsoft will take you to the overview page for your new App, In the left menu, click Authentication tab.

  9. Scroll down to Implicit grant and hybrid flows and select the ID tokens (used for implicit and hybrid flows) checkbox.

2. Locate your tenant ID

  1. If you aren’t already signed into the Entra Portal , sign in.
  2. Expand Entra ID and click Overview.
  3. In the Basic information section, find the Tenant ID.

When you register an app in your Entra tenant, the User.Read API permission is created by default. This permission is not required for PaperCut NG/MF and can be removed if you wish.

3. Configure PaperCut NG/MF

Enter the application details into the PaperCut NG/MF admin interface.

  1. Log in to the PaperCut NG/MF admin interface.

  2. Navigate to Options, User/Group Sync, Single Sign On with Microsoft

  3. Select the Enable the ‘Sign in with Microsoft’ button on the Admin and User web interfaces checkbox. Two extra fields are displayed.

  4. Enter the Tenant ID and App ID you saved earlier.

    To test, navigate to https://<yourpapercutserver>:9191 . If your setup was successful, you should see the Sign in with Microsoft button on the User and Admin web interfaces and can sign in successfully.

Microsoft SSO for Print Deploy

To allow users to authenticate with Microsoft in the Print Deploy client:

  1. Go to Enable Printing, which opens automatically to the Print Deploy tab.

  2. Click Settings.

  3. Under Authentication methods, select the Microsoft checkbox.

  4. Set the User Identity method to PROMPT.

  5. Click Save.

Microsoft SSO for Mobility Print

Sign in with Microsoft for Mobility Print isn’t currently supported, but it is under consideration. If you have any questions, please open a support ticket and reference MOB-2650.

Comments