TimeClock Plus

[Cärl Waldbieser]

A follow up on this one-- I was able to get the SSO configuration for the
manager and the user endpoints working.  A big thanks to everyone who
provided their insights.
However, I was recently told that there is a 3rd login for the physical
clocks.  When we asked for the SSO URL for that endpoint, they gave me the
same endpoint as for the manager interface, which makes no sense to me.
The vendor is just suggesting we set up local logins for this, which just
seems kind of flawed to me because you would lose the MFA and risk-based
protection our SSO provides.

Has anyone else set up SSO for the clock admin endpoint?

Thanks,
Carl Waldbieser
ITS
Lafayette College

On Tue, Jun 10, 2025 at 1:28 PM Carl Waldbieser <waldbiec at lafayette.edu>
wrote:

> I know it has been 5 years, but now we're integrating with this vendor.
> I think I could probably guess what our metadata file is supposed to look
> like, but it is more of a puzzle to me what our unsolicited SSO URL is
> supposed to look like.
> If anyone could provide templates for the metadata or URL, I would
> appreciate it.
>
> Thanks,
> Carl Waldbieser
> ITS
> Lafayette College
>
>
> On Tue, Jun 16, 2020 at 12:19 PM Boyd, Todd M. <tmboyd1 at ccis.edu> wrote:
>
>> Walt,
>>
>>
>>
>> I just sent you an e-mail off-list with further information. Provided it
>> works for you, I’ll get a cleaner post put together and put it here.
>>
>>
>>
>>
>>
>> -Todd
>>
>>
>>
>> *From:* users <users-bounces at shibboleth.net> *On Behalf Of *Yantis, Walt
>> *Sent:* Tuesday, June 16, 2020 10:17 AM
>> *To:* Shib Users <users at shibboleth.net>
>> *Subject:* Re: TimeClock Plus
>>
>>
>>
>> *CAUTION!:* This email originated from outside of Columbia College.
>>
>> I wish they had responded to you because now we're getting to integrate
>> with them!  Yay
>>
>>
>>
>> First time I've been asked to not sign the response, and to only sign the
>> assertion, but still didn't get us any further.
>>
>>
>>
>> If you wouldn't mind sharing a working metadata file I'd love to compare
>> it to the one I've been working on.
>>
>>
>>
>> Walt
>>
>> Texas State University
>> ------------------------------
>>
>> *From:* users <users-bounces at shibboleth.net> on behalf of Boyd, Todd M. <
>> tmboyd1 at ccis.edu>
>> *Sent:* Saturday, May 16, 2020 11:53 AM
>> *To:* Shib Users <users at shibboleth.net>
>> *Subject:* RE: TimeClock Plus
>>
>>
>>
>> Perhaps moot, as this has already been replied to, but I will say that we
>> had a similarly ridiculous go-round with them until I just manually crafted
>> a metadata file for their SP. Integrating with them was frustrating, to say
>> the least. Afterward, I offered to provide them with documentation about
>> how the Shibboleth integration had been done, but nothing ever came of it.
>>
>> -Todd
>>
>> -----Original Message-----
>> From: users <users-bounces at shibboleth.net> On Behalf Of Lohr, Donald
>> Sent: Friday, May 15, 2020 8:10 AM
>> To: users at shibboleth.net
>> Subject: TimeClock Plus
>>
>> CAUTION!: This email originated from outside of Columbia College.
>>
>>
>> Any of you have this application/SP configured.
>>
>> Per the vendor, they only support "IdP Initiated" and do not have any
>> configuration documentation to provide.
>>
>> They do configuration as a conference call.
>>
>> I need more detailed information about what a configuration looks like.
>>
>> As always thanks,
>> Don
>>
>> --
>> D o n a l d   L o h r
>> I n f o r m a t i o n   S y s t e m s
>> J a m e s   M a d i s o n   U n i v e r s i t y
>> 5 4 0 . 5 6 8 . 3 7 3 0
>>
>> --
>> For Consortium Member technical support, see
>> https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fx%2FcoFAAg&data=02%7C01%7Cwyantis%40txstate.edu%7C1f65be65682a4932fd2008d7f9b99e07%7Cb19c134a14c94d4caf65c420f94c8cbb%7C0%7C0%7C637252447927368398&sdata=zNDKKqDh4GD%2BVzl7un4ir4%2Fh3mnoNXNpvd3WF7RGFII%3D&reserved=0
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>> --
>> For Consortium Member technical support, see
>> https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fx%2FcoFAAg&data=02%7C01%7Cwyantis%40txstate.edu%7C1f65be65682a4932fd2008d7f9b99e07%7Cb19c134a14c94d4caf65c420f94c8cbb%7C0%7C0%7C637252447927368398&sdata=zNDKKqDh4GD%2BVzl7un4ir4%2Fh3mnoNXNpvd3WF7RGFII%3D&reserved=0
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>> --
>> For Consortium Member technical support, see
>> https://wiki.shibboleth.net/confluence/x/coFAAg
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250922/6b47af54/attachment.htm>