Configuring Lexmark Cloud Services

1. Log in to Lexmark Cloud Services.

   


2. From the navigation menu on the right side of the screen, select Account Management.

   


3. If necessary, select your organization, and then click Next.

   


4. From the Organization menu, select Authentication Provider.

   


5. Click Configure on Authentication Provider.

   


6. From the Authentication Provider Type menu, select SAML.

   

   Note:  The Domains field allows Lexmark Cloud Services to establish a new user account after the user logs in. Listing each organization domain is not required. If no domain is set, then the new users must be manually added to the organization before they log in.



7. In the SAML Authentication Provider section, select either With Metadata URL or Without Metadata URL.

   Note:  We recommend selecting With Metadata URL for a shorter process.

   With Metadata URL

   

   1. In the SAML Authentication Provider section, select With Metadata URL.

      
   

   2. In the SAML Metadata URL (Required) field, paste the App Federation Metadata Url that you have previously copied and retained.

      Note:  For more information on App Federation Metadata Url, see Downloading certificates and copying URLs.

   

   3. Click Configure Authentication Provider.

   Without Metadata URL

   

   1. In the SAML Authentication Provider section, select Without Metadata URL.

      
   

   2. In the Identity provider entity ID (Required) field, depending on your location, type either of the following:

      • For EU: https://lexmarkb2ceu.b2clogin.com/LexmarkB2CEU.onmicrosoft.com/B2C_1A_TrustFrameworkBase_ciam
      • For US: https://lexmarkb2c.b2clogin.com/LexmarkB2C.onmicrosoft.com/B2C_1A_TrustFrameworkBase_ciam

      Note:  The URLs must be same to the URLs entered in Microsoft Entra ID.

   

   3. Enter the required information copied from Azure AD:

      • SSO target URL (Required)
      • SSO Logout URL (Required)
      • Certificate (Required)

      Note:  Make sure that you include the header and the footer for the certificate.

   

   4. Click Configure Authentication Provider.

Note:  Make sure that you do not exit the Lexmark Cloud Services portal or allow the portal to time out. It is time to test your SAML connection, and you may be unable to log in to correct any problems discovered during testing. For more information on testing the federation, see Testing a federation.