Jump to
↵select↑↓navigateescclose

Employee Timeclock

On this page

Badge-scan timeclock kiosks for ERPNext and HRMS. Employees clock in and out by scanning a badge, and on the shop floor the same badge starts and stops timers on Job Cards. Each employee's punches for a day are kept in one Workday record, in sync with their Employee Checkins.

The kiosks

PageWho signs inHow an employee identifies
/employee-timeclock (Employee Clock-in/out web form)a kiosk userscans their badge
/timeclock (badge kiosk)a kiosk userscans their badge
/job_timeclock (job time tracker)a kiosk user, or the employee's own userscans their badge at a kiosk; a signed-in employee is already known

None of the pages or their API methods accept Guest. An employee is never identified by their Employee ID, which is guessable. A badge is either:

  • a badge token HR issues from the Employee form. It is random, it is shown once for printing on the badge (as a barcode or QR code), and only its SHA-256 hash is stored; or

  • an RFID tag registered in the Employee's Attendance Device IDs table.

Badge scans are rate limited per client IP, and an unrecognised badge is refused with the same message whatever the reason, so a kiosk never reveals whether an employee exists.

Installation

The app needs ERPNext and HRMS on the site. From the bench directory:

bench get-app https://github.com/Avunu/employee_timeclock
bench --site <site> install-app employee_timeclock

Setting up a kiosk

  1. Create the kiosk user. In User, add a user for the kiosk device (one per device makes it easy to revoke one), as a Website User, with only the Timeclock Kiosk role. The app installs that role. Give it a strong password.

  2. Issue badges. For each employee who will clock in, open the Employee and choose Timeclock → Issue Badge (HR Manager or System Manager only). Print the token shown on the employee's badge as a barcode or QR code that the kiosk's scanner reads. Issuing again replaces the badge; Timeclock → Revoke Badge disables it for a lost badge or a leaver. Employees who already badge in with an RFID tag in Attendance Device IDs keep working without a new badge.

  3. Sign the kiosk in. On the kiosk device, open the kiosk page, sign in as the kiosk user and leave the browser on that page.

Only Active employees can clock in.

License

MIT