Configure Guest Print

Turn on Guest Print so employees can invite visitors and contractors to print without a user account. For background, see How Guest Print works.

Before you begin

  • You have administrator access to the web console.
  • You have the details for your identity provider to hand. Guest Print requires OpenID Connect or SAML; Internal and Active Directory authentication are not supported. For OpenID Connect you will need the Well-Known Endpoint, Client ID and Client Secret. For SAML you will need the Metadata URL, or the Entity ID, Single Sign-In URL and Signing Certificate.
  • The printers you want guests to use support passcode authentication, which is currently available on HP, Konica Minolta, Canon and Lexmark printers.

Steps

1

Configure your authentication provider

Employees are redirected to your authentication provider to sign in before they can invite guests, so the provider must be configured first.

Navigate to Secure > Settings > Authentication Providers and select OpenID Connect or SAML 2.0, enter the details supplied by your provider, then save. For OpenID Connect you will need:

  • Well-Known Endpoint (for example, https://accounts.google.com/.well-known/openid-configuration)
  • Client ID
  • Client Secret

For SAML you will need either:

  • The Metadata URL (recommended), or
  • The Entity ID, Single Sign-In URL and Signing Certificate

For the full procedures, see User Authentication Providers and Configure SAML 2.0 Authentication (for print users).

2

Enable Passcode Only Release

Guests authenticate at the printer using a system-generated passcode, which requires this setting.

Navigate to Secure > Settings > Passcode Settings and turn on Enable Passcode Only Release. See Passcode settings and limits.

3

Enable Guest Print

  1. Go to Secure > Settings > Guest Print.
  2. Toggle Enable guest printing on.
  3. In the Duration field, set how long guests can use the system after being invited. The default is 30 days, and the setting applies to all guests.

For the permitted range and other values, see Guest Print settings.

4
Optional

Choose which printers allow guests

Enabling Guest Print globally makes it available on every secure printer. To limit guest access, turn it off in the Device Profiles that should not accept guest jobs.

  1. Go to Secure > Device Profiles. A Guest Print option appears in each profile once the feature is enabled globally.
  2. Enable or disable Guest Print for each profile. Printers assigned to that profile follow its setting. Profiles you create while Guest Print is enabled for the organization have it enabled, so disable it in any profile that should not accept guest jobs.
  3. Assign profiles to printers from Secure > Secure Printers. Printers you have not reassigned use the Default Profile.

See Device Profiles.

NoteGuests attempting to sign in at a printer where Guest Print is disabled see the message “Guest Printing is not permitted on this device.”

Result

Guest Print is enabled. Employees with System user permission can now invite guests from Secure > Invite, and guests can release jobs at any printer where Guest Print is permitted.

Related topics