Papercut Sync - hosted in AD syncing users from Azure

[Frodo_Baggins]

Morning,

 

Not sure if being fobbed off, thoughts?

 

Papercut server hosted in AD, all end user devices or in Microsoft Endpoint Manager with Print Deploy installed.

I changed the sync source from Papercut to Azure AD which seems to have worked fine but Print Deploy will not accept credentials nor will the admin web interface (Microsoft SSO works fine.)

 

My re-seller has said it's not possible as the server is still in AD.... I'm sure I had this setup at a previous school (not doing hybrid with aliasing and client has been re-installed)

 

Cheers,

[PaperCutterBrenda]

Hi there, PaperCutter here! Check out this article for some guidance: https://www.papercut.com/kb/Main/UsingUPNswithAzureADSync#more-about-mfa-2fa-requirements. You'll need to create an exception on the Microsoft side to allow the PaperCut server to bypass MFA/2FA and allow username and password authentication. Hope that helps! And if not, let me know so I can connect you with the folks here who are much brainier than me.

[Frodo_Baggins]

Hi there, PaperCutter here! ���� Check out this article for some guidance: https://www.papercut.com/kb/Main/UsingUPNswithAzureADSync#more-about-mfa-2fa-requirements. You'll need to create an exception on the Microsoft side to allow the PaperCut server to bypass MFA/2FA and allow username and password authentication. Hope that helps! And if not, let me know so I can connect you with the folks here who are much brainier than me.

 

Thanks, sure enough it is MFA - AADSTS50076, do you know if there any other changes needed? I've excluded the Papercut directory sync app from our conditional access policies and updated named locations but still getting that error in papercut log (SSO works fine.)

[Frodo_Baggins]

Hi there, PaperCutter here! ���� Check out this article for some guidance: https://www.papercut.com/kb/Main/UsingUPNswithAzureADSync#more-about-mfa-2fa-requirements. You'll need to create an exception on the Microsoft side to allow the PaperCut server to bypass MFA/2FA and allow username and password authentication. Hope that helps! And if not, let me know so I can connect you with the folks here who are much brainier than me.

Looks like I'm now running into known issue PO-656 - my policies are user based, could you dm with contact details for the team you mentioned please? Thanks!

[PaperCutterBrenda]

Good morning! It sounds like you'd be best off contacting our support team to dig a bit deeper into this scenario. Do you mind emailing [email protected] with the details and they'll help you out. Thank you!