Active Directory

DOVICO Timesheet's integrated link to Microsoft's(R) Active Directory service A Windows network architecture permitting organizations to share and manage information about network resources and users. allows employees to be imported from Active Directory and also authenticates DOVICO Timesheet logon user IDs and passwords against Active Directory.

Note: If a company enables Active Directory integration with DOVICO Timesheet, it is highly recommended that DOVICO Timesheet be secured (the IIS virtual directory) by using SSL or another security mechanism.

Instructions when using the Microsoft Project Link

Please follow these alternate instructions if you are planning to link employees to both Active Directory and Microsoft Project/Project Server.

Alternate instructions when using the QuickBooks Link

Please follow these alternate instructions if employees have already been synchronized with QuickBooks.

The Active Directory link is located in the Integration section of the side navigation bar.

To synchronize employees with Active Directory:

Prerequisite:

Employees entered in Active Directory must have a First and Last name.

STEP 1: Establish connection information

Open the connection information area of the screen by clicking the "+" graphic.
Enter the Active Directory server name.
Enter the port number for the Active Directory server.
Enter the Windows User ID and Password for a user having Read access to Active Directory.

The Advanced button should only be used by experienced Active Directory administrators to customize the employees returned from the Active Directory query. The “Secure authentication” option should be left on at all times except in testing scenarios.
Click the Connect button.

STEP 2 (Optional): Schedule updates

Schedule daily updates by checking the update checkbox and entering the scheduled update time (in HH:MM).

Tips:

Daily updates should be scheduled during non-peak times.
If daily updates are not required, a manual update for all employees shown in the 'Employees to be synchronized' list box can be accomplished by clicking the Apply button.
DOVICO Timesheet's Job Scheduler service must be running for scheduled updates to occur.

STEP 3: Synchronize employees

Once the connection to the Active Directory server is established, all Active Directory employees that have not been synchronized to DOVICO Timesheet are listed in the left column (Available Active Directory Employees) and all employees currently synchronized to DOVICO Timesheet are listed in the right column (Employees to be synchronized).

Select one or more employees from the left column.
Click the Add>> button to move them to the list of employees to be synchronized.
Click Apply.

In the case where employees already exist in the DOVICO Timesheet database (i.e. have identical User IDs), a new window opens offering the option to merge the conflicting employee account information in the DOVICO Timesheet database. When merged, an employee's first name, last name, user ID, password and e-mail address established in DOVICO Timesheet are overwritten with the information from Active Directory.

Check each employee to overwrite.
Click OK.

For each newly imported employee, the employee properties (security level, software access, rates, etc.) should be reviewed and adjusted as required.

Notes:

When synchronized, the employee's First Name, Last Name, User ID and e-mail address displayed in the Employees view cannot be edited. Any changes to these fields can only be accomplished using Active Directory. The employee's Password is not stored in the DOVICO Timesheet database and the password cannot be modified using any DOVICO Timesheet component.
When any employee User ID is modified using Active Directory, that employee will have to be re-synchronized before that user can log into DOVICO Timesheet.
The First Name, Last Name, User ID and e-mail address fields in DOVICO Timesheet have limits on the maximum number of characters. Data imported from Active Directory which exceeds these limits will be truncated. First Name (100 characters), Last name (100), User ID (100) and e-mail address (250).
Once the connection information is established, an attempt to connect to the Active Directory Server is made every time the Active Directory view is accessed.