Single Sign On (with SAML)

David van de Maas from ngage explains: “As soon as the option became available, our organisation set up a federation with ClockWise using SAML.”

Start your trial
ngage logo

What is SAML?

“In short, it is web-based Single Sign-On across domains. The service provider ClockWise (SP) leaves authentication to the identity provider ngage (Identity Provider or IDP). SAML is based on trust, a trust between the IDP and the SP. The user experiences it as a true Single Sign-On: once logged in to our portal, you are no longer asked for a user name and password to use ClockWise.” “ngage specialises in Identity & Access Management. SAML is an important part of Access Management and we implement it frequently for our clients. From government services to publishers and from cloud applications to webshops.”

Why SAML?

“ClockWise is one of the business-critical (financial) applications. The time tracking and the invoices that are generated are an important part of running the business. Using a federation through SAML delivers a few important benefits.”

Security

“In our view, business-critical applications should be secured with more than just a user name and password. Multi Factor Authentication (MFA) is used for this, so a user name and password plus a token, SMS, Yubikey or smartcard. Implementing MFA on all the systems and applications you use can become a complex affair, though. There are many solutions, and not every application supports every method. By using one single source of authentication, namely our IDP, a password policy only has to be enforced in one place and an MFA solution only has to be used on that system. On top of that, SAML is extremely suitable for enforcing authorisations centrally.”

Ease for administrators

“The technical or functional administrators of an application such as ClockWise do not have to reset passwords, set up self-service for it or write procedures for it.”

Ease for users

“Not only will users not have to enter a password for every application, they also do not have to change their password in various systems.”

Implementing SAML

“Putting SAML into use can range from remarkably simple to extremely complex. That complexity is mainly caused when the message traffic contains very specific elements. The SAML (2.0) standard has been around since 2005, though, and is a widely used method, so it is fully matured.”

SAML and ClockWise

“The SAML integration with ClockWise falls into the remarkably simple category. In the ClockWise settings you can start a wizard to define an external authentication provider, which sets up the configuration on the ClockWise side. The next step is defining the service provider on the IDP side. In our case we use MicroFocus Access Manager, which meant that there too we only had to start a wizard. It worked straight away. An interesting option that ClockWise has built in is that, per type of user, you can let the user choose between providers.”

Are you already a customer, or would you like more information?

Then take a look at our knowledge centre. There you will find detailed manuals and all the settings for each integration.

Go to the knowledge centre

Experience it yourself

We understand that implementing ClockWise straight away is a big step. That is why we offer ClockWise free for 4 weeks. During those 4 weeks you can use all the features, with the support of our service desk.

Start your trial
Illustratie bij het gratis uitproberen van ClockWise

Frequently asked questions

See if your answer is here

Am I required to keep a record of hours worked?

Yes. As an employer in the Netherlands you are required to record the hours your employees work. That is laid down in the Working Hours Act. The law is simply there to make sure people do not work too much and get enough rest. How exactly you keep those records is up to you, as long as your registration is clear and reliable. Discover here how ClockWise can help you keep a clear and correct record of hours.

Is switching to ClockWise complicated?

No, switching to ClockWise is simple. The system is easy to use and quick to understand, so you can get started without long or expensive implementation projects. We guide you through the setup where needed, so you can switch quickly and smoothly and work efficiently right away.

What service does ClockWise offer?

Our customer service is directly available by phone, by email or through the website. No ticket systems or endless waiting times, but a colleague who thinks along with you straight away. Whether your question is about settings, reports or invoicing, we are here for you. Many customers choose ClockWise precisely because of our personal approach and short lines.

Does ClockWise have a knowledge centre?

ClockWise has kenniscentrum.clockwise.info, where you can find answers to your questions about time tracking and the hours screen, the holiday card, the reports and the financial options in ClockWise. If you get stuck, you can always contact our service desk.

Does ClockWise have an API?

ClockWise has an API. It is accessible once you have a ClockWise subscription. With the API you can retrieve data for your dashboard, for example in Power BI or Qlik, or you can create projects and employees.

What does time tracking give me?

Time tracking offers many benefits. It gives insight not only into employee activity and productivity, but also into costs and the efficiency of your work processes. Time tracking is also important for assessing project status and returns, and it forms the basis for accurate invoicing. It also allows companies to improve their operational efficiency.

Why is time tracking important for R&D projects?

Do you work on innovative projects, or do you want to make use of subsidies such as the Dutch WBSO? Then good time tracking is often mandatory. The government wants to know exactly how much time is invested in research and development. By keeping your hours neatly, you can easily show that you meet the conditions. That way you avoid missing out on a subsidy and you always have insight into the effort within your R&D projects. Read more here about how ClockWise supports time tracking for the WBSO.

Can I use iDEAL payment links in my invoices?

Yes. With a Mollie account you can easily add iDEAL payment links to your invoices in ClockWise. Customers pay faster and you keep an overview. You connect it by entering your Mollie API key in ClockWise and setting the payment link as a default or per customer. Our team is of course happy to help you integrate this. See here how to add an iDEAL link to invoices.