In Maintenance and settings | Settings | Login you can change the settings for logging in.
The following settings can be changed here:
Determine user name |
• Manual: user name must always be filled in manually.
|
||||
Environment variable |
Fill in the environment variable here that is to be used to determine the user name ( if ‘use environment variable’ has been selected). |
||||
Password checking |
Via application: The password entered by the employee is checked against the password entered when logging in. Via Windows domain: the Windows domain is asked to verify if the password that was entered is correct. Via Single Sign-On with SAML: Log in will be delegated by a SAML identity provider (see Single Sign-On with SAML). (Only i.c.w. TimeWriter cloud server) |
||||
Automatic login when possible |
If this action is activated login will be automatic with the located user name. If this fails, a login screen will appear. N.B. Automatic login will not work when Determine user name is set to Manual. |
Single Sign-On with SAML
If log in should be delegated by a SAML identity provider then you can set this at Maintenance and settings | Settings | Login . Below is a picture of the SAML settings:
Step 1: Enter email addresses
Enter the email addresses per employee in TimeWriter. Use the same email addresses as used by the users in the SAML identity provider.
Step 2: Register TimeWriter at the SAML identity provider
TimeWriter must be registered as a service provider at the identity provider. The identity provider needs the URL from the field SAML service provider | identifier ( Entity ID ) URL. The URL can be copied from here.
Step 3: Setup SAML identity provider
Most likely the SAML identity provider has got a URL with the metadata (e.g.: https://your-identity-provider/saml/metadata.xml). Copy the URL to the editor by clicking on the Import metadata (url) button.
If the identity provider has got an xml. Copy that xml to the dialog using the Edit metadata (xml) button.
The URL's and certificate will be automatically filled using the above described buttons. Optionally you can enter the URL's and certificate manually.
Step 4: Test the settings
When the settings is saved, you will be prompt for testing the settings. Proceed the test to see if the log in via the identity provider will succeed.