Configure Token Vault Settings in eCopy ShareScan

This topic describes the fourth configuration task in the process of setting up eCopy ShareScan connectors, email watchers and the Notification service configured with Microsoft 365 or Google's Gmail SMTP Server to use modern authentication.

Perform this task in the eCopy ShareScan Administration Console after you have successfully

• registered a Microsoft 365 / NetDocuments / iManage Work / Google application for Token Vault through the Microsoft Identity Platform (Azure Active Directory) admin center or on NetDocuments portal or in iManage Work Control Center or on the Google Cloud Platform Console portal
• registered a Microsoft 365 or a NetDocuments or an iManage Work or a Google authorization provider in Token Vault, and,
• authorized Token Vault in Microsoft 365 and/or NetDocuments and/or iManage work and/or Google.

To configure Token Vault settings in eCopy ShareScan, perform the following steps:

1. Open eCopy ShareScan Administration Console.
2. Go to Advanced > Tools, and select Token Vault Settings.
3. The Token Vault Settings dialog opens. Enter Token Vault connection settings information as follows:
   • Protocol: Select the protocol configured for Token Vault site
   • Server address: Enter the fully qualified name of the machine where Token Vault is deployed
   • Port: Enter the port configured for Token Vault. This value must be the same as the port configured on the Token Vault Server Settings page as the value of
     • HTTPS Port setting when Token Vault is configured with HTTPS, or
     • Port setting when Token Vault is configured with HTTP.
   • Security: Select the security mode for communication with Token Vault according to the Accept requests only from registered clients setting available on the Token Vault Server Settings page.

     If the Token Vault Accept requests only from registered clients setting is configured as Yes, select Certificate from the list for the certificate-based communication with Token Vault and click Export certificate to export the ShareScan certificate. Then copy the exported certificate file to the Token Vault computer and register ShareScan as Token Vault client on the Token Vault Manage clients page with this certificate file.

     If the Token Vault Accept requests only from registered clients setting is configured as No, you can also select Basic from the list.

     We recommend that you select Certificate as Security and register ShareScan as Token Vault client with the ShareScan certificate.
4. Click the Token Vault URL link to test your Token Vault connection settings. The Token Vault site should open in your default browser.
5. Go to the Authorization Providers group and enter the Provider IDs in the Authorization Provider ID column for the eCopy connectors and/or email watchers and/or Notification service that you want to configure: Exchange, Fax via Exchange, NetDocuments, SharePoint, SMTP via LDAP, Worksite connectors, and/or Watch e-mail inbox via IMAP, Watch e-mail inbox via POP3, and/or Notification service. The Authorization Provider ID must be the same as the Provider ID generated by Token Vault when you created an authorization provider in Token Vault for these eCopy connectors/email watchers/Notification service.

   The Authorization Provider ID entered in the Authorization Provider ID column for an eCopy connector is used by all profiles of that connector to use modern authentication, except if the Authorization Provider ID is configured as a connector profile setting under the Token Vault setting group on Setting pane.

   Similarly, the Authorization Provider ID entered in the Authorization Provider ID column for POP3/IMAP email watchers (Watch e-mail inbox via POP3/Watch e-mail inbox via POP3) is used by all POP3 or IMAP email watcher to use modern authentication, except if the Authorization Provider ID is configured as an email watcher setting under the Token Vault setting group in watcher wizard.

6. Click the Save button to save Token Vault Settings.