Method and system for automatically selecting an authentication domain

1. An image processing apparatus comprising:

one or more processors; and

a memory storing instructions that, when executed by the one or more processors configures the image processing apparatus to

receive, from a credential source, a credential having a domain identifier identifying an authentication domain and authentication data used to authenticate with an authentication domain;

parse at least a portion of the domain identifier to obtain information identifying the authentication domain with which to authenticate the credential;

automatically reconfigure the image processing apparatus to authenticate with the identified authentication domain when it is determined, based on the information identifying the authentication domain, that a currently configured authentication domain is different from the identified authentication domain; and

transmit the authentication data of the received credential to the reconfigured domain for domain authentication processing.

2. The image processing apparatus according to claim 1 , wherein upon execution of the instructions, the image processing apparatus is further configured to

receive, from a user, a local authentication credential used to locally authenticate the credential source with the image processing apparatus prior to receiving the credential.

3. The image processing apparatus according to claim 1 , wherein the memory stores a data object including a set of at least two domain configurations representing available domains with which the image processing apparatus can execute domain authentication processing, and execution of the instructions further configures the image processing apparatus to

search the stored data object in the memory for available authentication domains, and

determine, using the information identifying the authentication domain received from the credential source, whether the image processing apparatus is capable of authenticating the credential with the identified authentication domain.

4. The image processing apparatus according to claim 1 , wherein

the automatic reconfiguration of the authentication domain occurs without the need to disconnect the credential source from the image processing apparatus.

5. The image processing apparatus according to claim 1 , wherein

in response to determining that image processing apparatus is not configured to execute authentication processing with identified authentication domain, modifying a data object including a set of available authentication domains to include the identified authentication domain; and

automatically reconfigure the image processing apparatus using the modified data object to enable authentication processing with the identified domain.

6. The image processing apparatus according to claim 1 , wherein

the credential source is a smart card and includes a storage for storing information identifying the authentication domain and the authentication data, and the image processing apparatus further comprises

a card reader that selectively receives the smart card and reads the information identifying the authentication domain.

7. The image processing apparatus according to claim 1 , wherein

the information identifying the authentication domain is a user principal name.

8. The image processing apparatus according to claim 1 , wherein the memory stores a data object including a set of at least two domain configurations representing available domains with which the image processing apparatus can execute domain authentication processing, each respective domain configuration including a target domain address with which the credential source can be authenticated and at least one alias domain address that is different from but associated with the target domain address, and execution of the instructions further configures the image processing apparatus to

search the stored data object in the memory for available authentication domains;

determine, by comparing the information identifying the authentication domain received from the credential source, with respective target domain addresses and at least one alias domain addresses, whether the image processing apparatus is capable of authenticating the credential with the identified authentication domain;

in response to determining that the information identifying the authentication domain matches an alias domain information, selecting the target domain address associated with the identified alias domain information; and

transmitting the authentication data to the selected target domain for authentication processing.

9. The image processing apparatus according to claim 1 , wherein

the information identifying the authentication domain includes a primary domain identifier indicating the domain with which the credential can be authenticated, and at least one secondary type of domain identifier that is used to identify the authentication domain in a case where the primary domain identifier is not available.

10. The image processing apparatus according to claim 9 , wherein

the primary domain identifier is a user principal name, and

the at least one secondary type of domain identifier includes one or more of (a) a domain component data, and (b) subject name data contained in a certificate stored on the credential source.

11. A method of controlling login processing in an image processing apparatus, the method comprising:

receiving, from a credential source, a credential having a domain identifier identifying an authentication domain and authentication data used to authenticate with an authentication domain;

parsing at least a portion of the domain identifier to obtain information identifying the authentication domain with which to authenticate the credential;

automatically reconfiguring the image processing apparatus to authenticate with the identified authentication domain when it is determined, based on the information identifying the authentication domain, that a currently configured authentication domain is different from the identified authentication domain; and

transmitting the authentication data of the received credential to the reconfigured domain for domain authentication processing.

12. The method according to claim 11 , further comprising

receiving, from the credential source, a local authentication credential used to locally authenticate the credential source with the image processing apparatus prior to receiving the credential.

13. The method according to claim 11 , further comprising

searching a data object including a set of at least two domain configurations representing available domains with which the image processing apparatus can execute domain authentication processing the stored in memory for available authentication domains, and

determining, using the information identifying the authentication domain received from the credential source, whether the image processing apparatus is capable of authenticating the credential with the identified authentication domain.

14. The method according to claim 11 , wherein

the automatic reconfiguration of the authentication domain occurs without the need to disconnect the credential source from the image processing apparatus.

15. The method according to claim 11 , further comprising

modifying a data object including a set of available authentication domains to include the identified authentication domain in response to determining that image processing apparatus is not configured to execute authentication processing with identified authentication domain; and

automatically reconfiguring the image processing apparatus using the modified data object to enable authentication processing with the identified domain.

16. The method according to claim 11 , wherein

the credential source is a smart card and includes a storage for storing information identifying the authentication domain and the authentication data, and the image processing apparatus, and the activity of receiving is performed by a card reader that selectively receives the smart card and reads the information identifying the authentication domain.

17. The method according to claim 11 , wherein

the information identifying the authentication domain is a user principal name.

18. The method according to claim 11 , wherein the memory stores, and execution of the instructions further configures the image processing apparatus to

searching a data object stored in memory that includes a set of at least two domain configurations representing available domains with which the image processing apparatus can execute domain authentication processing, each respective domain configuration including a target domain address with which the credential source can be authenticated and at least one alias domain address different from but associated with the target domain address for available authentication domains;

determining, by comparing the information identifying the authentication domain received from the credential source, with respective target domain addresses and at least one alias domain addresses, whether the image processing apparatus is capable of authenticating the credential with the identified authentication domain;

in response to determining that the information identifying the authentication domain matches an alias domain information, selecting the target domain address associated with the identified alias domain information; and

transmitting the authentication data to the selected target domain for authentication processing.

19. The method according to claim 11 , wherein

the information identifying the authentication domain includes a primary domain identifier indicating the domain with which the credential can be authenticated, and at least one secondary type of domain identifier that is used to identify the authentication domain in a case where the primary domain identifier is not available, wherein

the primary domain identifier is a user principal name, and

the at least one secondary type of domain identifier includes one or more of (a) a domain component data, and (b) subject name data contained in a certificate stored on the credential source.

20. A non-transitory computer readable storage medium storing instructions that, when executed by one or more processors, configures an image processing apparatus to execute a method of controlling login processing in an image processing apparatus, the method comprising:

receiving, from a credential source, a credential having a domain identifier identifying an authentication domain and authentication data used to authenticate with authentication domain;

parsing at least a portion of the domain identifier to obtain information identifying the authentication domain with which to authenticate the credential;

automatically reconfiguring the image processing apparatus to authenticate with the identified authentication domain when it is determined, based on the information identifying the authentication domain, that a currently configured authentication domain is different from the identified authentication domain; and

transmitting the authentication data of the received credential to the reconfigured domain for domain authentication processing.