Step 1: Register

You will receive login credentials after you complete the application form. These credentials will enable you to create an API secret, which is your ‘password’ to programmatically access SwipeClock’s API endpoints.

In order to understand the types of API secrets available, it’s important to review the hierarchy built into SwipeClock’s systems. The image below depicts some important entities and actors in SwipeClock.

1. Partner/Accountant – A partner/accountant administers any number of sites below them. A typical example of a partner is a payroll provider who has setup SwipeClock for a number of employers they manage.

2. Client/Site – A client/site is an end employer setup for SwipeClock’s services. Each site will have a number of employees managed along with users identified as client/site administrators and supervisors. In our image we have three sites: Steve’s Lawn Care, Joe’s Pizza Shop and Dr. Martin’s Office.

3. Employee – an employee using SwipeClock’s services.

4. Client/Site Administrator – a client/site can have certain user accounts granted administrative privileges to manage aspects of the client/side configuration.

5. Supervisor – a client/site can have user accounts with supervisor/management privileges to manage aspects of specific employees within the client/site.

Step 2: Synchronize Data

Step 3: User Interface

Overview

The single sign on workflow allows you to render SwipeClock with your platform as an embedded HTML iframe/object or into a new browser window/tab. No matter which method you choose, the initial set of steps are the same.

Step 1: Authenticate Against SwipeClock’s OAuth Token Endpoint

URL: https://clock.payrollservers.us/AuthenticationService/oauth2/userToken. You must first create your JWT (tip: visit https://jwt.io/#libraries-io for a number of free libraries/SDKs available for use to create your JWT).

Creating a JWT Header

The first part of your JWT will be the header. This identifies the algorithm and token type you’re using. Included in the JWT header are:

Below is an example of a header of a JWT.

{
    alg: "HS256",
    typ: "JWT"
}

Creating a JWT Body/Payload

URL: https://clock.payrollservers.us/AuthenticationService/oauth2/userToken. You must first create your JWT (tip: visit https://jwt.io/#libraries-io for a number of free libraries/SDKs available for use to create your JWT).

Creating a JWT Header

The first part of your JWT will be the header. This identifies the algorithm and token type you’re using. Included in the JWT header are:

Below is an example of the JSON body/payload for your JWT for partner 1, site 69481 and employee with the employee code 1234 if you’re using a client level API secret.

{
    iss: 69481,
    product: "twpemp",
    sub: "client",
    exp: 1517004886,
    siteInfo: {
        type: "id",
        id: "69481"
    },
    user: {
        type: "empcode",
        id: "1234"
    }
}

Below is an example of the JSON body/payload for your JWT for partner 1, site 69481 and employee with employee code 1234 if you’re using a partner level API secret.

{
    iss: 1,
    product: "twpemp",
    sub: "partner",
    exp: 1517004886,
    siteInfo: {
        type: "id",
        id: "69481"
    },
    user: {
        type: "empcode",
        id: "1234"
    }
}

Below is an example of the JSON body/payload for your JWT for partner 1, site 69481 and supervisor with the login ssosupervisorlogin if you’re using a client level API secret.

{
    iss: 69481,
    product: "twplogin",
    sub: "client",
    exp: 1517004886,
    siteInfo: {
        type: "id",
        id: "69481"
    },
    user: {
        type: "login",
        id: "ssosupervisor"
    }
}

The differences between using the partner API secret and client API secret is within the following elements of the JSON body/payload:

Creating a JWT Signature

The last part of the JWT will be the signature. This is the result of taking the base64 encoding of the header, base64 encoding of the payload and your API secret and signing it with the selected hashing algorithm.

Below is an example of creating your full JWT within JavaScript (before actually posting the JWT to the SwipeClock OAuth Token Endpoint) using a client API secret:

<script src="https://kjur.github.io/jsrsasign/jsrsasign-latest-all-min.js"></script>
<script type=”text/javascript”>
    let header = {alg: "HS256", typ: "JWT"};
    let token = {
        iss: 69481,
        product: "twpemp",
        sub: "client",
        exp: 1517004886,
        siteInfo: {
            type: "id",
            id: “69481”
        },
        user: {
            type: "empcode",
            id: “1234”
        }
    }
    let jwt = KJUR.jws.JWS.sign("HS256", JSON.stringify(header), JSON.stringify(token),
                                "yUQsBz2aTWIL5iB2o3p2syXfQhfiZyGX0Zr6UT4l75aHb7NRln09gqAujFyR9fbu");
</script>

Posting a JWT to SwipeClock’s OAuth Token Endpoint

Now that you have your JWT, the next step will be posting this to the SwipeClock OAuth Token Endpoint to receive your access token. The JWT must be included in the HTTP Authorization header as a Bearer token. Here’s a sample of using JavaScript (and jQuery) to add the JWT as a Bearer token and calling the SwipeClock OAuth Token Endpoint:

<script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>
<script type="text/javascript">
$.ajax({
    url: "https://clock.payrollservers.us/AuthenticationService/oauth2/userToken",
    method: "POST",
    headers: {
        "Authorization": `Bearer [myJwt]`,
        "Content-Type": "application/json"
    },
    success: (result, status) => {
        if (result && result.token) {
        // we’ve received an access token!
        } else {
        // An access token was not issued
        }
    },
    error: (o, err) => {
        // An error occurred calling the token endpoint
    }
})
</script>

Here’s a full JavaScript method to put all the pieces above together. In it, the JWT is created and posted to the SwipeClock OAuth Token Endpoint. A JavaScript callback function is used to act on the result of the post to the OAuth Token Endpoint.

<script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>
<script src="https://kjur.github.io/jsrsasign/jsrsasign-latest-all-min.js"></script>
<script type="text/javascript">
getJWT("1", "69481", "1234", "yUQsBz2aTWIL5iB2o3p2syXfQhfiZyGX0Zr6UT4l75aHb7NRln09gqAujFyR9fbu", function(err, jwt){
    if (err) {
        console.log(`Fail: ${err}`);
    } else {
        // JWT authenticated received. We have two options:
        // 1. Host SwipeClock as an embedded iframe
        // 2. Open up a new browser window/tab into SwipeClock
        console.log(‘Success: ‘ + jwt);
    }
});

function getJWT(partnerID, siteID, employeeID, apiSecret, callback){
    let header = { alg: "HS256", typ: "JWT" };
    // body/payload token being created is based on using a client api secret
    let token = {
        iss: siteID,
        product: "twpemp",
        sub: "client",
        exp: Math.floor(Date.now() / 1000) + 60 * 5,
        siteInfo: {
            type: "id",
            id: siteID
        },
        user: {
            type: "empcode",
            id: employeeID
        }
    }
    let jwt = KJUR.jws.JWS.sign("HS256", JSON.stringify(header), JSON.stringify(token), apiSecret);
    console.log(`Calling Authentication Service with JWT’ + jwt);
    $.ajax({
        url: "https://clock.payrollservers.us/AuthenticationService/oauth2/userToken",
        method: "POST",
        headers: {
            "Authorization": `Bearer ` + jwt,
            "Content-Type": "application/json"
        },
        success: (result, status) => {
            if (result && result.token) {
                // we received an access token!
                callback(null, result.token);
            } else {
                // An access token was not issued
                callback('Status: ' + status + ', Result: ' + JSON.stringify(result), null);
            }
        },
        error: (o, err) => {
            // An error occurred calling the token endpoint
            console.log(o);
        }
    })
}
</script>

Complete the Single Sign On into SwipeClock’s

Take the access token JWT returned from the SwipeClock OAuth Token Endpoint and use it to complete a single sign on into the SwipeClock system. This can be done either as an embedded iframe/object.

Either way you choose, the access token JWT you received will be added as a query string to one of the following URLs:

• Web Clock: https://clock.payrollservers.us/?jwt=[myIssuedJwt]
• Time Off: https://clock.payrollservers.us/ess/tor/?jwt=[myIssuedJwt]
• Time Card: https://payrollservers.us/pg/Ess/TimeCard.aspx?jwt=[myIssuedJwt]
• Scheduling: https://clock.payrollservers.us/ess/employee-schedule/?jwt=[myIssuedJwt]

Embedding a component as iframe

SwipeClock’s components are built to be stand-alone or as an embeddable widget. Embedding as a widget is easily done using an HTML iframe or object tag. Below are code examples showing authentication against the SwipeClock OAuth Token Endpoint and creating an iframe to display the components using a client API secret.

Embedding SwipeClock’s Web Clock Widget

<!DOCTYPE html>
<html>
    <head>
        <title>Embedded Web Clock Sample</title>
    </head>
    <body>
        <h2 id="processingText">Please wait while we complete SSO and generate the SwipeClock Web Clock</h2>
        <div id="result"></div>
        <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>
        <script src="https://kjur.github.io/jsrsasign/jsrsasign-latest-all-min.js"></script>
        <script type="text/javascript">
            $(function () {
                // Invoked when the document is ready
                getJWT("1", "69481", "1234", "yUQsBz2aTWIL5iB2o3p2syXfQhfiZyGX0Zr6UT4l75aHb7NRln09gqAujFyR9fbu", 
                    function(err, jwt) {
                    if (err) {
                        console.log('Fail: ' + err);
                        $('#result').html('Fail: ' + err);
                    } else {
                        // JWT authenticated received.
                        // Host SwipeClock as an embedded iframe
                        let webClockUrl = 'https://clock.payrollservers.us/?enclosed=1&compact=1&showess=1&jwt=' + jwt;
                        var iFrameSrc = '<iframe src="' + webClockUrl + '" style="height: 900px; width: 100%;"></iframe>';
                        $('#result').html(iFrameSrc);
                        $('#processingText').text('Please use the web clock below');
                    }
                });
            });

            function getJWT(partnerID, siteID, empcode, apiSecret, callback){
                let header = {alg: "HS256", typ: "JWT"};
                let token = {
                    iss: siteID,
                    product: "twpemp",
                    sub: "client",
                    exp: Math.floor(Date.now() / 1000) + 60 * 5,
                    siteInfo: {
                        type: "id",
                        id: siteID
                    },
                    user: {
                        type: "empcode",
                        id: empcode
                    }
                }
                let jwt = KJUR.jws.JWS.sign("HS256", JSON.stringify(header), JSON.stringify(token), apiSecret);
                console.log('Calling Authentication Service with jwt: ' + jwt);
                $.ajax({
                    url: "https://clock.payrollservers.us/AuthenticationService/oauth2/userToken",
                    method: "POST",
                    headers: {
                        "Authorization": 'Bearer ' + jwt,
                        "Content-Type": "application/json"
                    },
                    success: (result, status) => {
                        if (result && result.token) {
                            // we received an access token!
                            callback(null, result.token);
                        } else {
                            // An access token was not issued
                            callback('Status: ' + status + ', Result: ' + JSON.stringify(result), null);
                        }
                    },
                    error: (o, err) => {
                        // An error occurred calling the token endpoint
                        console.log(o);
                        $('#result').html('<h3 style="color: red;">See the console log for error details.</h3>')
                    }
                })
            }
        </script>
</body>
</html>

When embedding the web clock, you can also apply a few settings via query strings that help control the layout of the clock. These query string settings include:

Embedding SwipeClock’s Time Off Widget

<!DOCTYPE html>
<html>
<head>
<title>Embedded Time Off Sample</title>
    </head>
    <body>
    <h2 id="processingText">Please wait while we complete SSO and generate the SwipeClock Time Off</h2>
    <div id="result"></div>
    <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>
    <script src="https://kjur.github.io/jsrsasign/jsrsasign-latest-all-min.js"></script>
    <script type="text/javascript">
        $(function () {
            // Invoked when the document is ready
            getJWT("1", "69481", "1234", "yUQsBz2aTWIL5iB2o3p2syXfQhfiZyGX0Zr6UT4l75aHb7NRln09gqAujFyR9fbu", 
                function(err, jwt) {
                if (err) {
                    console.log('Fail: ' + err);
                    $('#result').html('Fail: ' + err);
                } else {
                    // JWT authenticated received.
                    // Host SwipeClock as an embedded iframe
                    let webClockUrl = 'https://clock.payrollservers.us/ess/tor/?jwt=' + jwt;
                    var iFrameSrc = '<iframe src="' + webClockUrl + '" style="height: 900px; width: 100%;"></iframe>';
                    $('#result').html(iFrameSrc);
                    $('#processingText').text('Please schedule time off below');
                }
            });
        });

        function getJWT(partnerID, siteID, empcode, apiSecret, callback){
            let header = {alg: "HS256", typ: "JWT"};
            let token = {
                iss: siteID,
                product: "twpemp",
                sub: "client",
                exp: Math.floor(Date.now() / 1000) + 60 * 5,
                siteInfo: {
                    type: "id",
                    id: siteID
                },
                user: {
                    type: "empcode",
                    id: empcode
                }
            }
            let jwt = KJUR.jws.JWS.sign("HS256", JSON.stringify(header), JSON.stringify(token), apiSecret);
            console.log('Calling Authentication Service with jwt: ' + jwt);
            $.ajax({
                url: "https://clock.payrollservers.us/AuthenticationService/oauth2/userToken",
                method: "POST",
                headers: {
                    "Authorization": 'Bearer ' + jwt,
                    "Content-Type": "application/json"
                },
                success: (result, status) => {
                    if (result && result.token) {
                        // we received an access token!
                        callback(null, result.token);
                    } else {
                        // An access token was not issued
                        callback('Status: ' + status + ', Result: ' + JSON.stringify(result), null);
                    }
                },
                error: (o, err) => {
                    // An error occurred calling the token endpoint
                    console.log(o);
                    $('#result').html('<h3 style="color: red;">See the console log for error details.</h3>')
                }
            })
        }
    </script>
</body>
</html>

Embedding SwipeClock’s Time Card Widget

<!DOCTYPE html>
<html>
<head>
<title>Embedded Time Off Sample</title>
    </head>
    <body>
    <h2 id="processingText">Please wait while we complete SSO and generate the SwipeClock Time Card</h2>
    <div id="result"></div>
    <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>
    <script src="https://kjur.github.io/jsrsasign/jsrsasign-latest-all-min.js"></script>
    <script type="text/javascript">
        $(function () {
            // Invoked when the document is ready
            getJWT("1", "69481", "1234", "yUQsBz2aTWIL5iB2o3p2syXfQhfiZyGX0Zr6UT4l75aHb7NRln09gqAujFyR9fbu", 
                function(err, jwt) {
                if (err) {
                    console.log('Fail: ' + err);
                    $('#result').html('Fail: ' + err);
                } else {
                    // JWT authenticated received.
                    // Host SwipeClock as an embedded iframe
                    let webClockUrl = 'https://payrollservers.us/pg/Ess/TimeCard.aspx?jwt=' + jwt;
                    var iFrameSrc = '<iframe src="' + webClockUrl + '" style="height: 900px; width: 100%;"></iframe>';
                    $('#result').html(iFrameSrc);
                    $('#processingText').text('Please schedule time off below');
                }
            });
        });

        function getJWT(partnerID, siteID, empcode, apiSecret, callback){
            let header = {alg: "HS256", typ: "JWT"};
            let token = {
                iss: siteID,
                product: "twpemp",
                sub: "client",
                exp: Math.floor(Date.now() / 1000) + 60 * 5,
                siteInfo: {
                    type: "id",
                    id: siteID
                },
                user: {
                    type: "empcode",
                    id: empcode
                }
            }
            let jwt = KJUR.jws.JWS.sign("HS256", JSON.stringify(header), JSON.stringify(token), apiSecret);
            console.log('Calling Authentication Service with jwt: ' + jwt);
            $.ajax({
                url: "https://clock.payrollservers.us/AuthenticationService/oauth2/userToken",
                method: "POST",
                headers: {
                    "Authorization": 'Bearer ' + jwt,
                    "Content-Type": "application/json"
                },
                success: (result, status) => {
                    if (result && result.token) {
                        // we received an access token!
                        callback(null, result.token);
                    } else {
                        // An access token was not issued
                        callback('Status: ' + status + ', Result: ' + JSON.stringify(result), null);
                    }
                },
                error: (o, err) => {
                    // An error occurred calling the token endpoint
                    console.log(o);
                    $('#result').html('<h3 style="color: red;">See the console log for error details.</h3>')
                }
            })
        }
    </script>
</body>
</html>

Embedding SwipeClock’s Scheduling Widget

<!DOCTYPE html>
<html>
    <head>
        <title>Embedded Scheduling Sample</title>
    </head>
    <body>
        <h2 id="processingText">Please wait while we complete SSO and generate the SwipeClock Scheduling</h2>
        <div id="result"></div>
        <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>
        <script src="https://kjur.github.io/jsrsasign/jsrsasign-latest-all-min.js"></script>
        <script type="text/javascript">
            $(function () {
                // Invoked when the document is ready
                getJWT("1", "69481", "1234", "yUQsBz2aTWIL5iB2o3p2syXfQhfiZyGX0Zr6UT4l75aHb7NRln09gqAujFyR9fbu", 
                    function(err, jwt) {
                    if (err) {
                        console.log('Fail: ' + err);
                        $('#result').html('Fail: ' + err);
                    } else {
                        // JWT authenticated received.
                        // Host SwipeClock as an embedded iframe
                        let webClockUrl = 'https://clock.payrollservers.us/ess/employee-schedule/?jwt=' + jwt;
                        var iFrameSrc = '<iframe src="' + webClockUrl + '" style="height: 900px; width: 100%;"></iframe>';
                        $('#result').html(iFrameSrc);
                        $('#processingText').text('');
                    }
                });
            });

            function getJWT(partnerID, siteID, empcode, apiSecret, callback){
                let header = {alg: "HS256", typ: "JWT"};
                let token = {
                    iss: siteID,
                    product: "twpemp",
                    sub: "client",
                    exp: Math.floor(Date.now() / 1000) + 60 * 5,
                    siteInfo: {
                        type: "id",
                        id: siteID
                    },
                    user: {
                        type: "empcode",
                        id: empcode
                    }
                }
                let jwt = KJUR.jws.JWS.sign("HS256", JSON.stringify(header), JSON.stringify(token), apiSecret);
                console.log('Calling Authentication Service with jwt: ' + jwt);
                $.ajax({
                    url: "https://clock.payrollservers.us/AuthenticationService/oauth2/userToken",
                    method: "POST",
                    headers: {
                        "Authorization": 'Bearer ' + jwt,
                        "Content-Type": "application/json"
                    },
                    success: (result, status) => {
                        if (result && result.token) {
                            // we received an access token!
                            callback(null, result.token);
                        } else {
                            // An access token was not issued
                            callback('Status: ' + status + ', Result: ' + JSON.stringify(result), null);
                        }
                    },
                    error: (o, err) => {
                        // An error occurred calling the token endpoint
                        console.log(o);
                        $('#result').html('<h3 style="color: red;">See the console log for error details.</h3>')
                    }
                })
            }
        </script>
</body>
</html>

Step 4: Documenting

• Software Name
• Category (e.g., Payroll Software, HRIS
• Software description (15 words)
• Integration description (50 words)
• Key integration benefits
• Instructions on How to enable the integration
• Detail on what data syncs between the software and SwipeClock
• Instructions on How to view an employee in SwipeClock
• Directions on where to go for support for the Connector

Step 4: Documenting

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua

<html>
<head> 
<title>Hi User App</title>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js"></script>
<script type=”text/javascript”> 
$(function () {
$.ajaxSetup({ cache: true }); 
$.getScript('//[pathToJavaScriptSdk]/hub-sdk.js', function () { 
HUB.init({ widgetKey: 'com.myshugo.myappname', version: '1.0.0.0', height: '200px', width: '318px'}, function (hubApp) {
// Code to do the work of the app 
$('body').text('Hey there ' + hubApp.user.FirstName + ' ' + hubApp.user.LastName); 
}); 
}); 
}); 
</script> 
</head> 
<body> 
</body> 
</html>

HUB.init({ widgetKey: 'com.myshugo.myappname', version: '1.0.0.0', height: '200px', width: '318px'}, 
function (hubApp) {});

{

"Token": xxx-xxxx-xxxxxx-xxxxx,

"ExpiresUTC": "2-11-2016 22:40:00",

}

BY CLICKING THE “APPROVE” BUTTON, YOU AGREE THAT YOU WOULD LIKE TO OFFER YOUR CLIENTS AND THEIR EMPLOYEES OR OTHER USERS ACCESS TO THE SWIPELOCK WORKFORCE MANAGEMENT APPLICATION (“SWIPECLOCK”). YOU AGREE TO THE FOLLOWING TERMS AND CONDITIONS IN ADDITION TO THE SUBSCRIPTION AGREEMENT YOU ENTERED INTO WITH SHUGO, LLC (“SHUGO”) WHEN YOU SIGNED UP FOR SHUGO’S ONLINE SERVICES. SUCH AGREEMENT TOGETHER WITH THIS SUPPLEMENT (AND OTHER SUPPLMENTS FOR OTHER ADDITIONAL SERVICES THAT YOU SUBSCRIBED TO) WILL GOVERN YOUR USE OF SHUGO’S ONLINE AND OTHER SERVICES, INCLUDING ANY OFFLINE COMPONENTS (COLLECTIVELY, THE “SERVICE”). IF YOU ARE ENTERING INTO THIS AGREEMENT ON BEHALF OF A COMPANY OR OTHER LEGAL ENTITY, YOU REPRESENT AND WARRANT THAT YOU HAVE THE POWER AND AUTHORITY TO BIND SUCH ENTITY TO THESE TERMS AND CONDITIONS, IN WHICH CASE THE TERMS “YOU” OR “YOUR” SHALL REFER TO SUCH ENTITY. IF YOU DO NOT HAVE SUCH POWER OR AUTHORITY, OR IF YOU DO NOT AGREE WITH THESE TERMS AND CONDITIONS, YOU MUST NOT CLICK THE “APPROVE” BUTTON AND MAY NOT USE THE SERVICE.

YOU AGREE THAT THE SWIPECLOCK APPLICATION AND RELATED SERVICES ARE PROVIDED ON AN “AS IS, WHERE-IS BASIS” WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.

SHUGO AND SWIPECLOCK SHALL NOT BE LIABLE FOR ANY CONTENT PROVIDED BY YOU OR THIRD PARTIES, ERRORS IN ANY CONTENT, PROGRAM, TOOL, OR APPLICATION, OR FOR ANY ACTION TAKEN IN RELIANCE THEREON. FURTHERMORE, SHUGO AND SWIPECLOCK SHALL NOT BE LIABLE TO YOU FOR ANY INTERCEPTION OF ONLINE COMMUNICATIONS OR WIRELESS COMMUNICATIONS, SOFTWARE OR HARDWARE PROBLEMS (INCLUDING, WITHOUT LIMITATION, VIRUSES, LOSS OF DATA, OR COMPATIBILITY CONFLICTS), OR OTHER CONSEQUENCE BEYOND THE REASONABLE CONTROL OF SHUGO OR SWIPECLOCK. ANY LIABILITY OF SHUGO OR SWIPECLOCK (INCLUDING ITS EMPLOYEES, AFFILIATES, AGENTS, THIRD PARTY VENDORS, AND THIRD PARTY CLIENTS OR CUSTOMERS) TO YOU FOR DAMAGES, INJURIES, LOSSES AND CAUSES OF ACTION, OF ANY KIND OR NATURE, WHETHER IN CONTRACT, TORT, NEGLIGENCE, OR OTHERWISE, EITHER JOINTLY OR SEVERALLY, SHALL BE STRICTLY LIMITED TO THE LESSER OF $500 OR THE AGGREGATE DOLLAR AMOUNT PAID BY YOU TO SHUGO IN YOUR MOST RECENT USE OF THE SHUGO SERVICES IMMEDIATELY PRIOR TO THE CLAIMED INJURY, LOSS OR DAMAGE.

BY CLICKING THE “APPROVE” BUTTON, YOU AGREE THAT YOU WOULD LIKE TO OFFER YOUR EMPLOYEES OR OTHER USERS ACCESS TO THE SWIPECLOCK WORKFORCE MANAGEMENT APPLICATION (“SWIPECLOCK”). YOU AGREE TO THE FOLLOWING TERMS AND CONDITIONS IN ADDITION TO THE GENERAL TERMS AND CONDITIONS OF THE USE OF THIS SITE. SUCH AGREEMENTS WILL GOVERN YOUR USE OF SHUGO’S ONLINE AND OTHER SERVICES, INCLUDING ANY OFFLINE COMPONENTS (COLLECTIVELY, THE “SERVICE”). IF YOU ARE ENTERING INTO THIS AGREEMENT ON BEHALF OF A COMPANY OR OTHER LEGAL ENTITY, YOU REPRESENT AND WARRANT THAT YOU HAVE THE POWER AND AUTHORITY TO BIND SUCH ENTITY TO THESE TERMS AND CONDITIONS, IN WHICH CASE THE TERMS “YOU” OR “YOUR” SHALL REFER TO SUCH ENTITY. IF YOU DO NOT HAVE SUCH POWER OR AUTHORITY, OR IF YOU DO NOT AGREE WITH THESE TERMS AND CONDITIONS, DO NOT CLICK THE APPROVE BUTTON.

YOU AGREE THAT THE SWIPECLOCK APPLICATION AND RELATED SERVICES ARE PROVIDED ON AN “AS IS, WHERE-IS BASIS” WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.

YOUR PAYROLL PROVIDER, SHUGO, AND SWIPECLOCK SHALL NOT BE LIABLE FOR ANY CONTENT PROVIDED BY YOU OR THIRD PARTIES, ERRORS IN ANY CONTENT, PROGRAM, TOOL, OR APPLICATION, OR FOR ANY ACTION TAKEN IN RELIANCE THEREON. FURTHERMORE, YOUR PAYROLL PROVIDER, SHUGO, AND SWIPECLOCK SHALL NOT BE LIABLE TO YOU FOR ANY INTERCEPTION OF ONLINE COMMUNICATIONS OR WIRELESS COMMUNICATIONS, SOFTWARE OR HARDWARE PROBLEMS (INCLUDING, WITHOUT LIMITATION, VIRUSES, LOSS OF DATA, OR COMPATIBILITY CONFLICTS), OR OTHER CONSEQUENCE BEYOND THE REASONABLE CONTROL OF YOUR PAYROLL PROVIDER, SHUGO, OR SWIPECLOCK. ANY LIABILITY OF SHUGO OR SWIPECLOCK (INCLUDING THEIR EMPLOYEES, AFFILIATES, AGENTS, THIRD PARTY VENDORS, AND THIRD PARTY CLIENTS OR CUSTOMERS) TO YOU FOR DAMAGES, INJURIES, LOSSES AND CAUSES OF ACTION, OF ANY KIND OR NATURE, WHETHER IN CONTRACT, TORT, NEGLIGENCE, OR OTHERWISE, EITHER JOINTLY OR SEVERALLY, SHALL BE STRICTLY LIMITED TO THE LESSER OF $500 OR THE AGGREGATE DOLLAR AMOUNT PAID BY YOU TO SHUGO IN YOUR MOST RECENT USE OF THE SHUGO SERVICES IMMEDIATELY PRIOR TO THE CLAIMED INJURY, LOSS OR DAMAGE.

BY CLICKING “APPROVE”, I AGREE THAT I WOULD LIKE TO USE THE SWIPECLOCK WORKFORCE MANAGEMENT APPLICATION. I ALSO AGREE TO THE FOLLOWING TERMS AND CONDITIONS WHICH ARE IN ADDITION TO THE GENERAL TERMS AND CONDITIONS OF THE USE OF THIS SITE.

I AGREE THAT THE SWIPECLOCK APPLICATION AND RELATED SERVICES ARE PROVIDED ON AN “AS IS, WHERE-IS BASIS” WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED. FURTHERMORE, I AGREE THAT MY PAYROLL SERVICE PROVIDER, SHUGO, and SWIPECLOCK SHALL NOT BE LIABLE TO ME FOR ANY INTERCEPTION OF ONLINE COMMUNICATIONS OR WIRELESS COMMUNICATIONS, SOFTWARE OR HARDWARE PROBLEMS (INCLUDING, WITHOUT LIMITATION, VIRUSES, LOSS OF DATA, OR COMPATIBILITY CONFLICTS), OR OTHER CONSEQUENCE BEYOND THE REASONABLE CONTROL OF MY PAYROLL SERVICE PROVIDER, SHUGO, AND SWIPECLOCK. ANY LIABILITY OF MY PAYROLL SERVICE PROVIDER, SHUGO, AND SWIPECLOCK (INCLUDING THEIR EMPLOYEES, AFFILIATES, AGENTS, THIRD PARTY VENDORS, AND THIRD PARTY CLIENTS OR CUSTOMERS) TO ME FOR DAMAGES, INJURIES, LOSSES AND CAUSES OF ACTION, OF ANY KIND OR NATURE, WHETHER IN CONTRACT, TORT, NEGLIGENCE, OR OTHERWISE, EITHER JOINTLY OR SEVERALLY, SHALL BE STRICTLY LIMITED TO THE LESSER OF $500 OR THE ACTUAL AMOUNT, IF ANY, OF THE CLAIMED INJURY, LOSS OR DAMAGE.

BY CLICKING THE “APPROVE” BUTTON, YOU AGREE THAT YOU WOULD LIKE TO OFFER YOUR CLIENTS AND THEIR EMPLOYEES OR OTHER USERS ACCESS TO SHUGO’S HUB REWARDS APPLICATION (“HUB REWARDS”) ON THE HUB PLATFORM AND, YOU AGREE TO THE FOLLOWING ADDITIONAL TERMS AND CONDITIONS IN ADDITION TO THE SUBSCRIPTION AGREEMENT YOU ENTERED INTO WITH SHUGO, LLC (“SHUGO”) WHEN YOU SIGNED UP FOR SHUGO’S ONLINE SERVICES. SUCH AGREEMENT TOGETHER WITH THIS SUPPLEMENT (AND OTHER SUPPLMENTS FOR OTHER ADDITIONAL SERVICES THAT YOU SUBSCRIBED TO) WILL GOVERN YOUR USE OF SHUGO’S ONLINE AND OTHER SERVICES, INCLUDING ANY OFFLINE COMPONENTS (COLLECTIVELY, THE “SERVICE”). IF YOU ARE ENTERING INTO THIS AGREEMENT ON BEHALF OF A COMPANY OR OTHER LEGAL ENTITY, YOU REPRESENT AND WARRANT THAT YOU HAVE THE POWER AND AUTHORITY TO BIND SUCH ENTITY TO THESE TERMS AND CONDITIONS, IN WHICH CASE THE TERMS “YOU” OR “YOUR” SHALL REFER TO SUCH ENTITY. IF YOU DO NOT HAVE SUCH POWER OR AUTHORITY, OR IF YOU DO NOT AGREE WITH THESE TERMS AND CONDITIONS, YOU MUST NOT CLICK THE “APPROVE” BUTTON AND MAY NOT USE THE SERVICE.

HUB Rewards App: In addition to the HUB application, you consent and agree that you would like Shugo to enable the HUB Rewards Application in HUB. HUB Rewards will provide third party offers and promotions to the users of HUB. Such third parties shall be solely responsible for the content and offers that are offered through HUB Rewards. You understand that these offers or promotions may take the HUB users to a third party website that is not owned or controlled by SHUGO.

Third Party Service/Promotion Providers: You understand that SHUGO may use third parties to provide the offers or promotions that are provided through the HUB Rewards Application. As such, the reward promotional offers through HUB Rewards may be limited by or subject to such third party agreements and services that may be in effect at the time of the provision of any HUB Rewards offers, promotions or content. You agree that SHUGO may share such information SHUGO deems necessary or appropriate with such third parties in order to provide the offers through HUB Rewards to you and the users of HUB who elect to use or receive the HUB Rewards Application.

YOU UNDERSTAND AND AGREE THAT SHUGO HAS NO RESPONSIBILITY OR LIABILITY WITH RESPECT TO THE OFFERS, PROMOTIONS OR OTHER CONTENT THAT ARE PROVIDED BY THIRD PARTIES THROUGH THE HUB REWARDS APPLICATION.

YOU AGREE THAT THE HUB REWARDS APPLICATION AND RELATED SERVICES ARE PROVIDED ON AN “AS IS, WHERE-IS BASIS” WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.

SHUGO SHALL NOT BE LIABLE FOR ANY CONTENT PROVIDED BY YOU OR THIRD PARTIES, ERRORS IN ANY CONTENT, PROGRAM, TOOL, OR APPLICATION, OR FOR ANY ACTION TAKEN IN RELIANCE THEREON. FURTHERMORE, SHUGO SHALL NOT BE LIABLE TO YOU FOR ANY INTERCEPTION OF ONLINE COMMUNICATIONS OR WIRELESS COMMUNICATIONS, SOFTWARE OR HARDWARE PROBLEMS (INCLUDING, WITHOUT LIMITATION, VIRUSES, LOSS OF DATA, OR COMPATIBILITY CONFLICTS), OR OTHER CONSEQUENCE BEYOND THE REASONABLE CONTROL OF SHUGO. ANY LIABILITY OF SHUGO (INCLUDING ITS EMPLOYEES, AFFILIATES, AGENTS, THIRD PARTY VENDORS, AND THIRD PARTY CLIENTS OR CUSTOMERS) TO YOU FOR DAMAGES, INJURIES, LOSSES AND CAUSES OF ACTION, OF ANY KIND OR NATURE, WHETHER IN CONTRACT, TORT, NEGLIGENCE, OR OTHERWISE, EITHER JOINTLY OR SEVERALLY, SHALL BE STRICTLY LIMITED TO THE LESSER OF $500 OR THE AGGREGATE DOLLAR AMOUNT PAID BY YOU TO SHUGO IN YOUR MOST RECENT USE OF THE SHUGO SERVICES IMMEDIATELY PRIOR TO THE CLAIMED INJURY, LOSS OR DAMAGE.

BY CLICKING THE “APPROVE” BUTTON, YOU AGREE THAT YOU WOULD LIKE TO OFFER YOUR EMPLOYEES OR OTHER USERS ACCESS TO SHUGO’S HUB REWARDS APPLICATION (“HUB REWARDS”) ON THE HUB PLATFORM AND, YOU AGREE TO THE FOLLOWING ADDITIONAL TERMS AND CONDITIONS IN ADDITION TO THE FOLLOWING TERMS AND CONDITIONS WHICH ARE IN ADDITION TO THE GENERAL TERMS AND CONDITIONS OF THE USE OF THIS SITE. SUCH AGREEMENT TOGETHER WITH THIS SUPPLEMENT (AND OTHER SUPPLMENTS FOR OTHER ADDITIONAL SERVICES THAT YOU ARE USING) WILL GOVERN YOUR USE OF SHUGO’S ONLINE AND OTHER SERVICES, INCLUDING ANY OFFLINE COMPONENTS (COLLECTIVELY, THE “SERVICE”). IF YOU ARE ENTERING INTO THIS AGREEMENT ON BEHALF OF A COMPANY OR OTHER LEGAL ENTITY, YOU REPRESENT AND WARRANT THAT YOU HAVE THE POWER AND AUTHORITY TO BIND SUCH ENTITY TO THESE TERMS AND CONDITIONS, IN WHICH CASE THE TERMS “YOU” OR “YOUR” SHALL REFER TO SUCH ENTITY. IF YOU DO NOT HAVE SUCH POWER OR AUTHORITY, OR IF YOU DO NOT AGREE WITH THESE TERMS AND CONDITIONS, DO NOT CLICK THE APPROVE BUTTON.

HUB Rewards App: In addition to the HUB application, you consent and agree that you would like your payroll provider to enable the HUB Rewards Application in HUB. HUB Rewards will provide third party offers and promotions to the users of HUB. Such third parties shall be solely responsible for the content and offers that are offered through HUB Rewards. You understand that these offers or promotions will take the HUB users to a third party website that is not owned or controlled by your payroll provider or SHUGO.

Third Party Service/Promotion Providers: You understand that HUB Rewards may use third parties to provide the offers or promotions that are provided through the HUB Rewards Application. As such, the reward promotional offers through HUB Rewards may be limited by or subject to such third party agreements and services that may be in effect at the time of the provision of any HUB Rewards offers, promotions or content. You agree that your payroll provider and SHUGO may share such information they deems necessary or appropriate with such third parties in order to provide the offers through HUB Rewards to you and the users of HUB who elect to use or receive the HUB Rewards Application.

YOU UNDERSTAND AND AGREE THAT YOUR PAYROLL PROVIDER AND SHUGO HAVE NO RESPONSIBILITY OR LIABILITY WITH RESPECT TO THE OFFERS, PROMOTIONS OR OTHER CONTENT THAT ARE PROVIDED BY THIRD PARTIES THROUGH THE HUB REWARDS APPLICATION. YOU AGREE THAT THE HUB REWARDS APPLICATION AND RELATED SERVICES ARE PROVIDED ON AN “AS IS, WHERE-IS BASIS” WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.

YOUR PAYROLL PROVIDER AND SHUGO SHALL NOT BE LIABLE FOR ANY CONTENT PROVIDED BY YOU OR THIRD PARTIES, ERRORS IN ANY CONTENT, PROGRAM, TOOL, OR APPLICATION, OR FOR ANY ACTION TAKEN IN RELIANCE THEREON. FURTHERMORE, YOUR PAYROLL PROVIDER AND SHUGO SHALL NOT BE LIABLE TO YOU FOR ANY INTERCEPTION OF ONLINE COMMUNICATIONS OR WIRELESS COMMUNICATIONS, SOFTWARE OR HARDWARE PROBLEMS (INCLUDING, WITHOUT LIMITATION, VIRUSES, LOSS OF DATA, OR COMPATIBILITY CONFLICTS), OR OTHER CONSEQUENCE BEYOND THE REASONABLE CONTROL OF YOUR PAYROLL PROVIDER AND SHUGO. ANY LIABILITY OF SHUGO (INCLUDING ITS EMPLOYEES, AFFILIATES, AGENTS, THIRD PARTY VENDORS, AND THIRD PARTY CLIENTS OR CUSTOMERS) TO YOU FOR DAMAGES, INJURIES, LOSSES AND CAUSES OF ACTION, OF ANY KIND OR NATURE, WHETHER IN CONTRACT, TORT, NEGLIGENCE, OR OTHERWISE, EITHER JOINTLY OR SEVERALLY, SHALL BE STRICTLY LIMITED TO THE LESSER OF $500 OR THE AGGREGATE DOLLAR AMOUNT PAID BY YOU TO SHUGO IN YOUR MOST RECENT USE OF THE SHUGO SERVICES IMMEDIATELY PRIOR TO THE CLAIMED INJURY, LOSS OR DAMAGE.

BY CLICKING “APPROVE”, I AGREE THAT I WOULD LIKE TO USE THE HUB REWARDS APPLICATION WHICH PROVIDES ACCESS TO PROMOTIONAL OFFERS AND REWARDS THAT MAY BE MADE AVAILABLE TO ME THROUGH HUB. I ALSO AGREE TO THE FOLLOWING TERMS AND CONDITIONS WHICH ARE IN ADDITION TO THE GENERAL TERMS AND CONDITIONS OF THE USE OF THIS SITE.

I UNDERSTAND THAT THESE OFFERS AND REWARDS ARE BEING OFFERED BY THIRD PARTIES AND THAT SUCH THIRD PARTIES ARE SOLELY RESPONSIBLE FOR SUCH OFFERS, REWARDS, AND OTHER CONTENT. I UNDERSTAND AND ACKNOWLEDGE THAT MY EMPLOYER, PAYROLL SERVICE PROVIDER AND SHUGO LLC SHALL NOT BE RESPONSIBLE OR LIABLE FOR ANY OFFERS OR CONTENT PROVIDED BY SUCH THIRD PARTIES OR THEIR RESPECTIVE PRODUCTS OR SERVICES. I UNDERSTAND IF I CLICK ON AN OFFER OR PROMOTION, I MAY BE LEAVING HUB AND GOING TO A THIRD PARTY WEB SITE.

I AGREE THAT THE HUB REWARDS APPLICATION AND RELATED SERVICES ARE PROVIDED ON AN “AS IS, WHERE-IS BASIS” WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.

MY PAYROLL SERVICE PROVIDER AND SHUGO SHALL NOT BE LIABLE FOR ANY OFFERS, REWARDS, OR CONTENT PROVIDED BY YOU OR THIRD PARTIES, ERRORS IN ANY CONTENT, PROGRAM, TOOL, OR APPLICATION, OR FOR ANY ACTION TAKEN IN RELIANCE THEREON. FURTHERMORE, MY PAYROLL SERVICE PROVIDER AND SHUGO SHALL NOT BE LIABLE TO YOU FOR ANY INTERCEPTION OF ONLINE COMMUNICATIONS OR WIRELESS COMMUNICATIONS, SOFTWARE OR HARDWARE PROBLEMS (INCLUDING, WITHOUT LIMITATION, VIRUSES, LOSS OF DATA, OR COMPATIBILITY CONFLICTS), OR OTHER CONSEQUENCE BEYOND THE REASONABLE CONTROL OF MY PAYROLL SERVICE PROVIDER AND SHUGO. ANY LIABILITY OF MY PAYROLL SERVICE PROVIDER AND SHUGO (INCLUDING ITS EMPLOYEES, AFFILIATES, AGENTS, THIRD PARTY VENDORS, AND THIRD PARTY CLIENTS OR CUSTOMERS) TO YOU FOR DAMAGES, INJURIES, LOSSES AND CAUSES OF ACTION, OF ANY KIND OR NATURE, WHETHER IN CONTRACT, TORT, NEGLIGENCE, OR OTHERWISE, EITHER JOINTLY OR SEVERALLY, SHALL BE STRICTLY LIMITED TO THE LESSER OF $500 OR SHALL BE STRICTLY LIMITED TO THE LESSER OF $500 OR THE ACTUAL AMOUNT, IF ANY, OF THE CLAIMED INJURY, LOSS OR DAMAGE.