Available in PaperCut NG and PaperCut MF.

Synchronize users from multiple Google Cloud Directory domains

Before you start

Your users and groups will now be identified by their fully qualified (email address) username to differentiate across domains. Consider your migration and rollback strategy; changing the names of every user in PaperCut can risk duplicate users and losing historical data. You can user server commands to automate renaming users and retain user history.

NOTE

  • If you’re creating users on-demand (for example, with Mobility Print) users might be duplicated when accessing Mobility Print with their short-form names after migration. Consider your migration strategy for these additional systems before implementing Google Cloud Directory (GCD) multi-domain.

  • PaperCut has a Technical Services team that can liaise with your reseller or chosen provider to ensure a planned setup of multi-domain support for GCD goes smoothly.

Before you start you might also like to check the list of limitations at the end of this page.

Set up syncing from multiple domains

Ensure you have PaperCut NG/MF version 20.0 or higher installed.

NOTE

If you’re migrating an existing installation, after setup you'll need to manually update your user names from their existing usernames to email format.

  1. We recommend you back up your system before your start. Just in case.

  2. Switch off on-demand user creation to prevent users being duplicated. This can happen when users are identified by their short-form username that doesn’t match the long-form username after migration.

  3. Use the Advanced Config Editor to set the following configuration keys:

    NOTE

    If you use the Config EditorThe Config Editor stores information used by PaperCut to configure advanced options and functions. This information is stored in config keys, which are editable by an administrator. incorrectly, you might cause serious problems that can only be fixed by reinstalling PaperCut NG/MF. Use the Config Editor at your own risk.

    • user-source.gsuite.username-with-domain = Y

    • system.normalize-network-username = N

  4. Set up the Google Workspace (formerly G Suite) sync in the usual way as described in Synchronize user and group details with Google Cloud Directory under Options > User/Group Sync.

    IMPORTANT

    In the field under "Step 2 - Type your Google Workspace or Google Cloud Identity domain name:", type each of your domains as a comma-separated list. For example, mydomaina.com,mydomainb.com

  5. Click Synchronize now to save and run your changes. New users will be imported by their fully qualified (email address) usernames. Existing users will remain with their short-form username.

  6. Migrate your users manually from their existing usernames to email format.

  7. If you are transitioning from a single domain to multiple domains, to prevent group name clashes you’ll need to convert your group names to email format. For more information, take a look at Synchronize user and group details with Google Cloud Directory.

    NOTE

    When you save an additional domain from your Google source, PaperCut NG/MF automatically detects the addition. You cannot continue syncing from multiple domains without converting your groups to email format; a warning banner will display.

    1. Click Convert. The group names automatically transition to email format group names.

      WARNING

      This is a one-way action. You can only reverse it by removing all groups and users from your PaperCut installation.

    2. Re-enter your comma-separated list of domains.

Limitations

We’ve documented these limitations to help you make the right decision for your environment.

  • There's a 50 character limit on individual usernames that applies to the fully qualified email address in multi-domain environments (for example jsmith@domain.com is a 17 character username).

  • There's a 1000 character limit on the domain input field.

  • Synchronizing user and group details might take several minutes for large numbers of domains.

  • When filtering imported users by groups, cross-domain group membership is not supported. Users are only imported if they both:

    • are a member of the selected group

    • share a domain with the selected group.