This guide explains how to enrol a managers fingerprint on the time clock application, which could be running locally on your hardware or on an all-in-one clocking kiosk, when there is no one onsite to enrol them, or when enrolment is blocked due to similar permission levels between users.
Contents
- Overview
- When this happens
- Why enrolment can be blocked
- Enrol before granting permissions or after downgrading permissions
- Temporarily enable PIN so the user can enrol themselves
Related Articles
Overview
Easy Employer applies security controls on fingerprint enrolment to reduce the risk of one user enrolling another user with similar access, which could allow identity spoofing.
When enrolment is blocked, or there is no one onsite to enrol a management user, use one of the options below depending on what is possible onsite.
When this happens
You will typically see this in one of these situations:
- A new manager has arrived onsite but there is no one available to enrol them, and fingerprint enrolment was not completed during onboarding.
- Someone is onsite to enrol the user, but time clock will not allow enrolment because the two users have the same or similar permission level.
Why enrolment can be blocked
If two users have similar permissions in Easy Employer, Easy Employer blocks one user from enrolling or re-enrolling the other as a security measure. This helps prevent identity spoofing.
Enrol before granting permissions or after downgrading permissions
- Create or update the user in Easy Employer and configure all required settings
- Do not apply the users permissions yet, or downgrade their permissions temporarily if already app;lie
- Enrol the user’s fingerprint on the kiosk.
- After fingerprint enrolment is complete, add the required permissions to the user’s profile.
Why this works: Enrolling the fingerprint before granting the enrolment related permissions prevents the permission based enrolment conflict from occurring.
Temporarily enable PIN so the user can enrol themselves
See: How to set or reset a PIN and Time Clock URL Setup & Configuration
- Open the user’s profile in Easy Employer.
- Go to User Profile then Clocking.
- Enable Allow PIN clocking.
- Have the user clock in using their PIN as themselves, then complete fingerprint enrolment
- Once fingerprint enrolment is complete, return to the user’s profile and disable Allow PIN clocking and the time clock pin clocking setting is set temporarily for this purpose.
Tips and common mistakes
- Do not leave PIN clocking enabled longer than needed. Disable it again after fingerprint enrolment is completed.
- If you are onboarding a manager, plan fingerprint enrolment as part of onboarding to improve the efficiency with your process.
- The user has pin code clocking enabled on their profile but clicking or pressing their name on the time clock doesn't show the pin entry dialog, this means the time clock does not allow pin clocking.