TimeTac

Overview

The TimeTac integration connects your TimeTac account to Oneleet, syncing its users as user account assets and the account itself as an asset. This lets Oneleet track who has access to TimeTac and whether the account enforces single sign-on and a strong password policy.

What does Oneleet monitor?

• TimeTac users, including their user group (Administrator, Employee, Client, or Multiuser), whether they’re an HR manager, and whether they’re active
• Your TimeTac account, including whether sign-in through single sign-on (SSO) is set to Required
• Your account’s password requirements, including whether the minimum password length is at least 12 characters

TimeTac doesn’t report two-factor authentication for individual users, so Oneleet shows their MFA status as unknown.

Setup

To set up the TimeTac integration, navigate to Integrations > Add integration > TimeTac.

Oneleet connects with a TimeTac API key, which an Administrator creates.

1. In TimeTac, open Company in the left navigation, then select Add-ons → API keys.
2. Click Add API key, enter a Name, optionally change the Expiration date, and click Continue.
3. Copy the Client ID and Client secret. The client secret is shown only once.
4. Find your account name: it’s shown above your name when you open the user menu in the top-right corner.
5. Enter the account name, client ID, and client secret into the form in Oneleet and click Connect.

When the API key expires, create a new one and reconnect the integration.

To raise the minimum password length, open Settings → Account settings → Login in TimeTac, set Password requirements → Length to at least 12, and click Save. To require single sign-on, configure it under Company → Add-ons → Single sign-on and set Login to Required. Single sign-on is available on the TimeTac Standard and Advanced plans.