I have a setup with Entra-joined Windows 11 clients, a CUPS server, and no domain controllers or Entra Domain Services. The management team is not interested in using Microsoft Universal Print. Given this environment, is there a way to achieve authenticated printing, or will I need to rely on a third-party solution like PrintLogic or PaperCut?
1 Answer
Yes, it's possible but it can be a bit complicated. CUPS can use Kerberos authentication, but without Active Directory, Entra-joined devices won't have traditional Kerberos tickets. You might need Azure AD Application Proxy or a custom SAML integration to make it work with CUPS. A simpler solution would be to go with PaperCut NG, which can sync with Entra ID. It takes care of authentication and offers pull printing, which can save costs in the long run.
So could CUPS still act as the print server while running PaperCut on top?