What is Single Sign-On?
Screenshot pending
The Hour Timesheet sign-in screen when SSO is enabled — employees use their identity-provider credentials instead of an Hour Timesheet password.
Single Sign-On (SSO) is an authentication method that lets your employees log in to Hour Timesheet using the same credentials they already use for other company applications — such as Microsoft 365 or Okta. Instead of managing a separate username and password for Hour Timesheet, users click Sign in with Microsoft (or go through your Okta portal) and are authenticated automatically.
SSO improves security, simplifies the login experience, and reduces the load on your IT team.
Supported identity providers and protocols
Hour Timesheet currently supports the following SSO configurations:
| Identity Provider (IdP) | Protocol | Status |
|---|---|---|
| Microsoft (Azure AD / Entra ID) | OpenID Connect (OIDC) | Available |
| Okta | OIDC or SAML 2.0 | Available |
| Microsoft GCCH (Government Cloud) | SAML 2.0 | Available (US Gov only) |
How the setup works
The exact steps depend on which identity provider you use. Pick the matching procedure below and follow it in order.
Microsoft (Azure AD / Entra ID)
Your IT administrator completes the following steps in the Azure Portal:
Sign in to the Azure Portal
Go to portal.azure.com and navigate to Microsoft Entra ID.
Register a new application
Create a new app registration and configure it for OpenID Connect (OIDC).
Set the Redirect URI
Use the URL Hour Timesheet provided for your account as the application’s Redirect URI. If you don’t have it yet, request it from your Hour Timesheet account representative.
Assign users or groups
In the application’s Users and groups blade, assign the people or groups who should be able to sign in to Hour Timesheet through SSO.
Send the credentials to Hour Timesheet
Provide three values to Hour Timesheet: Client ID, Client Secret, and Tenant ID. Once we receive them, our team completes the configuration — typically within one business day.
Okta
If your organization uses Okta, your IT administrator completes the following steps in the Okta Admin Console:
Open the Okta Admin Console
Sign in to the Okta Admin Console and navigate to Applications > Create App Integration.
Choose the sign-on method
Select SAML 2.0 as the sign-on method and Web Application as the application type.
Enter the Hour Timesheet endpoints
Enter the Single Sign-On URL and Audience URI (SP Entity ID) that Hour Timesheet provided for your account.
Assign users or groups
Assign the relevant users or groups to the application. This step is required — Okta will not issue tokens for users who haven’t been explicitly assigned.
Send the credentials to Hour Timesheet
Provide the Client ID, Client Secret, and your Okta domain. Once we receive them, our team completes the configuration.
What we need from your team
Before we begin your SSO configuration, please have the following information ready:
- Your identity provider: Microsoft (Azure AD / Entra ID), Okta, or another supported IdP.
- Your preferred protocol: OIDC or SAML 2.0. If you’re not sure, your IT team will know.
- Your Hour Timesheet subdomain: for example,
yourcompany.hourtimesheet.com. - Government Cloud users: let us know if you’re using Microsoft GCCH (Government Community Cloud High); GCCH requires a slightly different configuration.
Frequently asked questions
Do all users have to use SSO, or can some log in with a password?
SSO is configured at the company level. Once it’s enabled for your account, users sign in via your identity provider. Your IT team controls which users and groups are granted access through your IdP settings.
What if we use Google or another identity provider?
Hour Timesheet currently supports Microsoft and Okta as identity providers. Support for additional providers is being evaluated based on customer demand — please contact us to discuss your specific requirements.
How long does SSO setup take?
Once your IT team has finished the configuration on the IdP side and sent us the required credentials, our team typically activates SSO within a couple of business days. The overall timeline depends mostly on how quickly your team can complete the Azure or Okta setup.
Is there an additional cost for SSO?
Please contact our sales team to discuss SSO as part of your Hour Timesheet subscription.
Ready to get started?
If you’re evaluating Hour Timesheet and SSO is a requirement for your organization, we’re happy to walk you through the process. Reach out to your Hour Timesheet account representative or contact our support team at support@hourtimesheet.com to begin your SSO onboarding.