Single Sign-On
      Back to home
      1. WebWork Time Tracker Help Center
      2. Single Sign-On

      Duo Single Sign-On (SSO) Configuration

      WebWork Time Tracker supports SAML 2.0 Single Sign-On (SSO) with Duo Single Sign-On, so your organization can manage WebWork access centrally in Duo.

      Before configuring Duo SSO, ensure you have the following:

      • An active Duo account with administrator privileges

      • Access to SSO settings in WebWork Time Tracker (available to the Owner and Executive Managers in the Premium plan)

      How to add WebWork to Duo?

      1. Sign in to the Duo Admin Panel and open Applications > Application Catalog.

      2. Find WebWork Time Tracker (SSO) and click ➕ Add

      3. Under User access, grant the app to the Duo group(s) you’ll test with

      4. Attribute mapping: Duo pre-maps these fields and you can change only if your directory uses non-standard names:

      WebWork expects Active Directory Other SAML IdP
      Email mail Email
      First name givenName FirstName
      Last name sn LastName
      Username sAMAccountName Username
      objectSid objectSid objectSid

      Keep the Duo tab open and click Save. You’ll need its IdP metadata URL momentarily 

      In case WebWork Time Tracker isn’t listed in Duo’s catalog, follow their Generic SAML guide instead.

      How to configure Duo in WebWork?

      1. In WebWork, go to Settings > Single Sign-On (SSO)
      2. Choose Custom SAML
      3. Copy Duo’s IdP metadata URL and paste it into IDP Metadata URL in WebWork
      4. Click Save changes
      5. WebWork now shows a Single Sign-On URL (ACS URL)
      6. Copy and paste it into Service Provider in the Duo Admin Panel Single sign on URL field
      7. Scroll down and click Save

      All other SAML values (Entity ID, certificate, bindings) are auto-populated from the metadata.

      How to test your setup?

      1. Open a private or incognito browser window

      2. Browse to https://webwork-tracker.com/login

      3. Click Log in with SSO

      4. Enter your email and you’ll be redirected to Duo SSO

      5. Complete primary login (AD or another IdP) and Duo MFA

      6. Return to WebWork

      7. If successful, repeat with additional pilot users, then change Duo’s User access setting from the test group to All users

      If you have questions or encounter issues, reach out to our support here.

      For advanced SAML configuration, see our Custom SAML SSO Configuration guide.