Skip to main content
Have a Question?
< All Topics
Print
Posted
Updated

Single Sign-On (SSO) with Hour Timesheet

What Is Single Sign-On?

Single Sign-On (SSO) is an authentication method that allows your employees to log in to Hour Timesheet using the same credentials they already use for other company applications — such as Microsoft 365 or Okta. Instead of managing a separate username and password for Hour Timesheet, users simply click “Sign in with Microsoft” (or through your Okta portal) and are authenticated automatically.

SSO improves security, simplifies the login experience, and reduces the burden on your IT team.

Supported Identity Providers & Protocols

Hour Timesheet currently supports the following SSO configurations:

Identity Provider (IdP)ProtocolStatus
Microsoft (Azure AD / Entra ID)OpenID Connect (OIDC)Available
OktaOIDC or SAML 2.0Available
Microsoft GCCH (Government Cloud)SAML 2.0Available (US Gov only)

How the Setup Works

Getting SSO configured for your organization is straightforward. The setup process is collaborative — your IT team handles the configuration on your identity provider’s side, and our team handles the rest. Here is an overview of what to expect:

Microsoft (Azure AD / Entra ID)

Your IT administrator will need to complete the following steps in the Azure Portal:

  1. Log in to portal.azure.com and navigate to Microsoft Entra ID.
  2. Register a new application and configure it for OIDC (OpenID Connect).
  3. Set the Redirect URI to the URL provided by Hour Timesheet for your account.
  4. Assign the relevant users or groups to the application.
  5. Provide Hour Timesheet with three values: Client ID, Client Secret, and Tenant ID.

Once we receive those three credentials, our team will complete the configuration — typically within one business day.

Okta

If your organization uses Okta as your identity provider, your IT administrator will:

  1. Log in to the Okta Admin Console and navigate to Applications > Create App Integration.
  2. Select SAML 2.0 as the sign-on method and Web Application as the application type.
  3. Enter the Single Sign-On URL and Audience URI (SP Entity ID) provided by Hour Timesheet.
  4. Assign users or groups to the application (this step is required — not optional).
  5. Provide Hour Timesheet with the Client ID, Client Secret, and your Okta Domain.

If your organization uses Okta with OIDC instead of SAML, let us know and we will provide the appropriate Sign-in Redirect URI and Sign-out Redirect URI for your configuration.

What We Need from Your Team

Before we begin your SSO configuration, please have the following information ready:

  • Your Identity Provider (IdP): Microsoft (Azure AD / Entra ID), Okta, or other.
  • Your preferred protocol: OIDC (OpenID Connect) or SAML 2.0. If you are unsure, your IT team will know.
  • Your organization’s Hour Timesheet subdomain: for example, yourcompany.hourtimesheet.com.
  • Government Cloud users: please indicate if you are using Microsoft GCCH (Government Community Cloud High), as this requires a slightly different configuration.

Frequently Asked Questions

Do all users have to use SSO, or can some log in with a password?

SSO is configured at the company level. Once enabled for your account, users will log in via your identity provider. Your IT team controls which users and groups are granted access through your IdP settings.

What if we use Google or another identity provider?

Currently, Hour Timesheet supports Microsoft and Okta as identity providers. Support for additional providers is being evaluated based on customer demand. Please contact us to discuss your specific requirements.

How long does SSO setup take?

Once your IT team has completed the configuration on your IdP side and provided us with the required credentials, our team typically activates SSO within a couple of business days. The overall timeline largely depends on how quickly your team can complete the Azure or Okta configuration.

Is there an additional cost for SSO?

Please contact our sales team to discuss SSO as part of your Hour Timesheet subscription.

Ready to Get Started?

If you are evaluating Hour Timesheet and SSO is a requirement for your organization, we are happy to walk you through the process. Reach out to your Hour Timesheet account representative or contact our support team at support@hourtimesheet.com to begin your SSO onboarding.

Table of Contents