Project Vienna: Multi-domain Syncing

Prevent username clashing when syncing

In 20.0 PaperCut NG/MF can sync usernames across multiple Active Directory or Google Cloud Directory domains using the User Principal Name (UPN), avoiding username clashing.


The benefits of UPN username syncing

Better identification across multiple domains

User Principal Names (UPN usernames for short) do away with finicky issues found in legacy syncing methods.

For example, PaperCut NG and MF sync via sAMAccountName by default – so 'mary.jane' in domain A is considered the same user as 'mary.jane' in domain B. Not ideal.

UPN usernames, though? They're designed to keep pesky ID crossover and clashes at bay.

Easier authentication that's widely adopted

Our partners use UPN usernames in their multi-domain environments and for good reason:

  1. They're conveniently formatted like regular email addresses, i.e. they're made up of a log-on name, a separator (@ symbol), and a domain name.
  2. They're easy to remember – and can even be the same as the user's email. UPN suffixes can also be configured to shorten usernames in the case of long domain names.
  3. They're used by Active Directory Federation Services and other federated identity providers.


You've probably got a couple of questions on your mind right about now. We've done our best to answer the more common ones right here.

Which user sync sources are supported for multi-domain and UPN usernames?

As of 20.0 both Windows Active Directory and Google Cloud Directory are supported. Let us know in the feedback section below if you're interested in support for other sync sources such as Azure AD.

Can my users still login with their email address in PaperCut even if it's different to their UPN?

Certainly! As long as the user has the email address field populated in PaperCut.

Are there any limits on the length of my UPN username?

Yes, the full username including the domain can be no longer than 50 characters.

Can I migrate from sAMAccountName users to UPN users?

Yes, but right now it's not built into the user interface. You'll need to work with our solutions team to get things transitioned smoothly. Please reach out in the contact section below.

We know Windows clients are supported, what about Mac and Linux clients?

Sure thing! The client OS support does not differ from what PaperCut currently offers.

Does it work with Mobility Print?

Of course! End users can login to Mobility Print with their UPN username.

OK! But how do I enable UPN username support?!

As the feature is still in early beta stage we would like to work with you to determine the best way to set things up for your environment. See below contact section to reach out.

Get started with UPN username syncing

Becoming a beta pilot for UPN username syncing involves some fairly advanced tinkering, but we'll happily help you nail the perfect configuration – or just answer your questions for now.

Don't have a multi-domain environment, but still want to use UPN usernames? No problem. That's already doable with a few nifty config changes.

Check out the setup guide

Recommendations, complaints, questions – we want it all!