How to enable Azure authentication - Printix Administrator Manual

Enable this to allow users to sign in with their Microsoft work or school account and get single sign-on (SSO) to Printix. You just need a user account in Azure AD to configure Azure AD integration.

On the Authentication page, select the Azure AD tab.
Select Connect.
On the Microsoft Sign in page:
- Enter your work or school account.
- Enter Password.

Select Sign in.
Printix will ask you for permission to:
- Access your data anytime.
- View your basic profile.

Select Accept to grant these permissions, so Printix can configure Azure AD integration.
In Microsoft Azure this will add the enterprise application Printix.
- If you see the check box Consent on behalf of your organization, it is because you have the role as global admin in Azure AD and Printix has not yet been accepted for all users. Check Consent on behalf of your organization so Printix can have access to the specified resources for all users in your organization. No one else will be prompted.

Select OK if the connection to Azure AD was successful.

From now on the Sign in page will show Sign in with Microsoft.

See also:

How to accept Printix for all users

For Accept for all users select Accept to grant permission to read users’ profiles without prompting the individual in your organization. You must have the role as global admin in Azure AD to do this.
On the Microsoft Sign in page:
- Enter your administrator account. You must have the role as global admin in Azure AD to grant permission to read users’ profiles.
- Enter Password.

Select Sign in.
Printix will ask you to accept permissions for your organization to:
- Sign in and read user profile.
- Subsequent deletion or modification of the used global admin Azure AD account will not affect the already consented application permissions.

Select Accept to grant these permissions, so Printix can have access to the specified resources for all users in your organization. No one else will be prompted.
If this is successful you will see the message: Accepted for all users.

Optionally remove Sign in with email option.

How to revoke the acceptance of Printix

Open a new browser window and sign in to Microsoft Azure (portal.azure.com), using your work account credentials.
Select All Services, scroll to Identity and select Azure Active Directory.
On the Azure Active Directory blade, select Enterprise applications.
On the Enterprise applications blade, select Printix.
Select Delete.

How to find out if computer support SSO

Open a command prompt as Administrator and run the command: dsregcmd /status

Select the Start icon and select in the Search box.
Type cmd into the search box.
Right-click Command Prompt in the search window and select Run as administrator.
Type: dsregcmd /status
Scroll to the SSO State section and look for:

AzureAdPrt : TRUE

If the AzureAdPrt value is FALSE, the computer is not Azure AD joined and SSO (Single Sign-on) will not work.

If a group policy blocks Printix Client from running the dsregcmd command, you can modify Windows Registry to inform Printix Client that SSO is supported.

Select Windows logo key + R to open Run.
Type: regedit, and select OK.
In Registry Editor browse to:
HKEY_LOCAL_MACHINE\SOFTWARE\
printix.net\Printix Client\
Add the DWORD value name ForceAzurePrt and give it the value 1 (0×00000001).

In the PrintixClient log file (PrintixClient- user . number .log) you can also search for the text:

Azure: Token available = True

SSO (Single Sign-on) will not work if it says:

Azure: Token available = False

How to add multiple directories

Select Add to add another Azure AD directory.

Troubleshooting sign in

Sign in page does not show: Sign in with Microsoft

Azure authentication is not enabled.
RESOLUTION: You may have forgotten to select Save after you connected to Azure AD. If it still does not show, then try to refresh the browser (Ctrl + F5).

Permission denied

After you select Accept for all users and Sign in you get Permission denied.
RESOLUTION: You must sign in with a a role as global admin in Azure AD after you select Accept for all users.

Not authorized. You do not have permission to use Printix Administrator

The first time you Sign in with Microsoft, a new user is automatically created for you. This new user is not authorized to Sign in to Printix Administrator.
RESOLUTION: Sign in with email to Printix Administrator, and change the role of the newly created user to System manager. From now on you can sign in with your work or school account.

Azure authentication has been disabled and is now enabled again, and I want to accept Printix for all users again

If you disable Azure authentication and want to withdraw the accept of Printix, then you must do this from within Azure AD. If you have withdrawn the accept of Printix and now want to accept Printix again, then select the Accept again link.

You can’t access this application. Printix needs permission to access resources in your organization that only an admin can grant

After attempting to Sign in with Microsoft you are told you can not access Printix.
RESOLUTION: Follow the steps below to allow users to consent to apps accessing company data on their behalf. You must have the role as global admin in Azure AD to make this change. Printix will read the users’ basic profile (display name and email address).

Sign in to portal.azure.com.
Open Azure Active Directory.
Select User settings.
On the User settings page under Enterprise applications, select Manage how end users launch and view their applications.
Change Users can consent to apps accessing company data on their behalf to Yes.
Select Save.
It may take up to 15 minutes before the change take effect.

13.60. How to add users

13.62. How to enable Google authentication

Feedback

Post your comment on this topic.

13.61. How to enable Azure authentication