SAML Single Sign On and Password Security Updates

SAML (Security Assertion Markup Language) is an open standard that allows users to sign into multiple applications using a single set of credentials. There are many benefits to it, and most companies are steadily moving to adopt this model. We are as serious about security as you are, and that's why we have added SAML integration to Timesheet Portal.

In addition to SAML, we have also introduced some new password security features to keep your accounts more secure. Read below to learn more about the setup and the additional password protection measures we’ve added.

Changes to Billing and Rates Sections

SAML integration can be enabled and configured by going to Settings > Account > Security & Privacy, and then clicking on the SAML tab. You will need to have an understanding of how SAML works in order to configure it; however, most of the fields that require configuration should be available from your current SSO provider. 

We have produced a help guide that explains how to set up Timesheet Portal SAML login for Azure Active Directory. Just search for SAML in our help guide.

As for the new password security features, we’re proud to introduce the above to our users:

• Enforcement of 2FA. You can force your users to register and use 2FA. 2FA has been a feature for some time but has not been enforceable.

• Enforcement of password history. You can now allow the system to prevent usage of x last-used passwords, ensuring your users are always using new passwords.

• Password ageing. You can set a maximum age on passwords, forcing your users to change their passwords when they expire.

• 24-hour password reset. Use this option to prevent a user from resetting their password less than 24 hours after the previous reset.

Be Part of Future Developments

At Timesheet Portal, we are always looking for ways to give our clients as much value as we can. All of our updates and changes begin with you. Therefore, if you have any complaints, suggestions or would just like to provide feedback - we are waiting to hear from you.