# PaperCut Print Deploy Configuration

Review the Print Deploy settings recorded for Microsoft sign-in on Entra-only devices, where Windows Integrated Authentication and username aliases caused mismatches.

!!!warning Source-derived reference
These notes were recovered from OneNote. Configuration, permissions and operating results have not been freshly verified. Confirm the applicable authority and environment before acting.
!!!

By default Print Deploy uses the local logged on user account (Windows Integrated Authentication - WIA) to log on to Print Deploy. This works for AzureAD Only users AS LONG AS the username Alias matches the local logged on user. Unfortunately this differs across users, depending on whether they existed in on prem originally or not (that is the samAccountName field exists in the on premises attributes within AzureAD.)

To negate this issue it is necessary to configure Print Deploy to use Microsoft as the ONLY Authentication method.

- Go to Papercut\>Enable Printing\>Print Deploy tab, Settings button
- Under Authentication Methods do the following.
- Untick the Username/Password tickbox. (If you leave the Username/Password tickbox selected the Print Deploy client uses WIA by default and will fail).
- Tick the Microsoft tickbox
- In the User Identity Method dropdown, select PROMPT.

This configuration results in the user being prompted to sign in to the Papercut Print Deploy Client the first time.

[Screenshot retained for review](../../review/Review-status.md#asset-f4f6df10ba390e7e79cf)

Pressing the Sign in with Microsoft button opens a separate browser tab to sign on.

- For students, that don't require MFA, the browser tab simply passes the users credentials and logs on automatically.
- For staff, requiring MFA, the browser tab passes the users credentials and will prompt for MFA if required.

This process is a once only as long as the "Don't show me this again" is ticked.

While this process is not user friendly as passthrough authentication, it is the only way for Azure AD Only users to authenticate to on premise Papercut.

## Related guidance

- [Topic overview](Introduction.md)
- [Source review status](../../review/Review-status.md)