Employee Security Tab

Mobile Punching & Rules

Here you can enable or disable Mobile Punching for phones, tablets or any device that uses a mobile network.  You will need to set a rule if the Mobile punch is enabled.

Enable Mobile Punch:

IIf the slider is Green it allows the employee to punch in/out on a mobile device such as a phone or tablet. If the slider is Red then mobile punching is not allowed.

Mobile Rule.  Options are:

  • Do Not Record GPS Coordinates: This option just allows them to use a mobile device and GPS is not required.
  • Record GPS Coordinates: This option will attempt to record the GPS coordinates (latitude and longitude) of the employee’s location when punching in/out.
  • Record GPS & Require GPS To Punch: This option will require the employee to turn on GPS location services on their device in order to punch in/out on a mobile device.
  • Record GPS, Warn If Not At GPS Locations(s): This option requires the employee to be at one of the GPS locations that are set up in the Locations List. If they are not at a GPS Punch Location punching is permitted, however, the admin/manager(s) will be notified. Also, the device’s GPS must be turned on in order to punch in/out.
  • Record GPS & Require GPS To Punch: This option the employee must be at one of the GPS Punch Locations that is set up in the locations list. Also, the device’s GPS must be turned on.

Security Tab Mobile Punching and Rules

 Device & Browser Authorization

Here you can lock down your employee to one or more devices/web browsers. With this option, you can restrict your employee to one or more web browsers and device. They would then need to be on that device and use that web browser to punch in/out.

To use this option you set the slider to Green. Then have the employee login on the browser they will be punching in/out on and it will show up in the device list after you go back into the Security tab for the employee. You then just set the slider to Green for that device and it will be the only device they can use to punch in/out. You can authorize multiple devices.

Special Notes:

  • App Users – If the employee deletes the re-install the app, the device will become unauthorized.
  • Browser Users – If the employee deletes the browser cookies, the browser will become unauthorized.

 Security Tab Device and Browser Authorization

IP Authorization

Here you choose if you want to use IP Enforcement.

IP enforcement is used if you want to limit the location as to where your employees punch in, such as your office/facility. If they punch in at home or elsewhere then it notifies the manager or administrator that they have punched in from an IP Address/Range which is in violation to their current settings. You will find your office/facility IP address at the bottom of the IP Authorization section (if you are at the same location as the employee punches in at). You can also use IP enforcement for employees working from home by using their home IP address.

Ontheclock.com can only see your Public IP address that your Internet Service Provider (ISP) gives your facility. It cannot see any of your Private IP addresses within your facility; these Private IP addresses cannot be seen on the Internet that is why they are Private IP addresses.

IMPORTANT NOTES:

  • When using the IP Enforcement option you must use a valid Internet email address for the manager, not an internal email address or a fake one. If you do not use a valid Internet email address your managers will never receive emails that are sent to notify them of the violation.
  • IP Enforcement will only work if you have Cable, a T1 line or a Static DSL Internet connection. Standard DSL constantly changes IP addresses, therefore, it will not work for IP Enforcement.
  • If you lose power or Internet connection, you may lose the IP address and you will need to update it.
  • Make sure you put a valid IP address in the IP boxes. 0.0.0.0 is not valid.

To use IP Enforcement you do the following:

  1. Slider the slider to Green to Enable IP Authorization which will expand the IP Authorization section.
  2. Choose the Enforcement Level:
    1. Off: This is the Default which turns off the IP Enforcement.
    2. Warn: This will warn them that they are punching in at an IP address that they were not assigned, send their manager (if assigned a manager) or the administrator if not assigned a manager an email, and still let them punch in.
    3. Lock Out: This will warn them that they attempted to punch in at an IP address that they were not assigned and will not let them punch in at that location. They still can log in anywhere and view & request PTO, view their Time Cards, view their Schedule but they will not be able to punch in.
  3. Choose the Enforcement Type.
    1. “IP”: For this, you use the Public IP address for your company. You can see your current IP Address just below where it says “Your current IP Address Is:” This option is used if you only have one IP address. If you have more than one facility then you use the Multi IP Range option.
    2. “SubNet”: For this, you only use the first three sections of your IP address. It is used when your Internet Service Provider (ISP) uses a range of IP addresses that you can be assigned. Your ISP can help you determine a range that you may fall into.
    3. “Sub-SubNet”: For this, you only use the first two sections of your IP address. It is used when your ISP uses a range of IP addresses that you can be assigned. Your ISP can help you determine a range that you may fall into.
    4. “IP Range”: For this, you put in a range of address, from an IP address to an IP address. Your ISP can help you determine a range that you may fall into.
    5. “Multi IP Range”: You can use this two ways:
      1. Use this if you have more than one facility to have multiple IP addresses.
      2. Use this if your ISP provides multiple ranges for your facility. Put in the first range then click on the “Add” button and it will show up in the yellow box below the Add button. Put in the second range then click on the “Add” button. To remove ranges just highlight the range in the “Multi IPs” yellow box and click on the “Remove” button. There are more specific instructions for using the Multi IP Range in the next section.
    6. Click the “Save” button when finished.

 Security Tap IP Enforcement Options          

  Guide to using the Multi IP Range

            If you have more than one facility here is how you add the multiple IP addresses.

  1. Put the first IP address into the From IP: and the To IP: (The Same IP Address in both lines.)
  2. Click on the Add button and it will add it to the yellow box below.
  3. Put the second IP address into the From IP: and the To IP:
  4. Click on the Add button and it will add it to the yellow box below.
  5. Add as many as you need this way.

 

             If you are using Multiple IP Ranges here is how to add those. 

  1. Put the first IP address of the range in the From IP: boxes
  2. Put the ending IP address of the range in the To IP: boxes
  3. Click on the Add button and then you will see it in the yellow box
  4. Add as many as you need this way.

 Security Tab Multi IP Range

Fingerprint Sign On

To use the Fingerprint Sign On you would need to purchase a Digital Persona U.are.U 4500 fingerprint reader and install the Fingerprint Reader Software from us. For more information on the Fingerprint Reader go to this link:  All About The Fingerprint Reader

NOTE: Fingerprint Sign On is a premium option. Do not turn it on unless you are using a Fingerprint Reader for the employees to sign into the system. If you turn it on and not using the Fingerprint reader then you will be paying an additional $0.50 per employee that has it turned on.

Security Tab Fingerprint Sign On 

Desktop GPS Rules

Here you can set the desktop & laptop computer GPS rule. The only option is the Record Punch Location. If you want to record the punch location you set the slider to Green.

NOTE: Recorded GPS location is not always 100% accurate when using a desktop or laptop. Learn more Here.

How Employee Punch GPS Works

Security Tab Desktop GPS Rules  

 

 Go back to Help