Modern Authentication for PaperCut MF

Overview

We’ve heard from many of you: Having to authenticate multiple times across different PaperCut login screens can be somewhat frustrating.

That’s why we are modernizing PaperCut MF with our new Unified Authentication platform to address “login fatigue” and adding SAML 2.0 support for a true SSO user experience.

Whether your organization uses local Active Directory or cloud-based Identity Providers (idP) for authentication like OKta, Entra ID. PaperCut MF now streamlines login behaviour with Unified Authentication and can integrate with those SAML-compliant providers to deliver a true Single Sign-On experience.

We’re opening access through this Percolator to gather real-world feedback before general availability.

Feature highlights at a glance

Unified Authentication
A modernized “central hub” that streamlines logins across web portals and user clients, ensuring a user logs in once and stays logged in across all PaperCut components.

SAML 2.0 Support
This allows users to authenticate using their existing corporate credentials from Okta, Ping Federate, JumpCloud, and many more.

Authentication Workflows
Connect PaperCut to your Identity Provider (IdP) to maintain unified security standards. This integration ensures that MFA policies are consistently enforced across every print login, streamlining access while upholding your organization’s predefined authentication requirements.

Explore the user experience

Modern Authentication
Once enabled, Unified Authentication allows users to log in once and have access to all components of MF across web logins, user clients and more.

The experience is seamless because the new central login looks identical to the web interface your users already know. Once you’ve signed in, the system automatically drops you back exactly where you need to be.

For the User Client, this means moving away from the old native login box to a quick browser-based prompt that handles your credentials securely.

SAML 2.0 Support
By allowing PaperCut to act as the Service Provider, SAML 2.0 provides that sought-after redirected login experience for third-party Identity Providers (IdPs). Once your configuration is in place and enabled, users can instantly authenticate using their familiar corporate credentials.

When a login is requested, the user is redirected to the external IdP for a familiar authentication experience. Once they’ve entered their credentials, they’re automatically routed back to PaperCut.

Real-world scenarios

Enterprises
A security-conscious firm can now enforce MFA for all print access, ensuring that print is no longer a “dark corner” of their security audit.

Large-Scale Education
Universities can sync PaperCut MF with their campus-wide identity systems, allowing students to use a single set of credentials for everything from the library to the lab.

Key benefits

• Strengthens Security: Integrates with your IDP and ensures your existing authentication flows are followed in PaperCut
• Improves user Experience: Simplifies user experiences across all PaperCut login points
• Extended SSO Support: Beyond Entra and Google, SAML 2,0 support for other compliant IDPs, allowing customers choice.
• Future Ready: Ensures PaperCut MF is capable of meeting the modern authentication needs of customers