EN search AFAS Online Status 5179 search results Install the Profit Communication Center on the user's workstation (Profit Windows) You install the PCC on your workstation and link an environment. From now on, you can use the linked environment in combination with the PCC. If you have multiple environments, you can download and install a settings file per environment. Contents Preparation Procedure Preparation The administrator configures Profit. The following parts of the configuration process only apply if users install the PCC via Profit Windows. InSite main site settings Authorise users Authorise users for the functions General / User / Communication Center / Save installation and General / User / Communication Center / Save settings Procedure Switch to the next Profit Update Full installation Use this procedure if the PCC has not yet been installed on your workstation. The PCC is a Windows application that you install on a Windows PC running a Windows version supported by AFAS. Add an additional environment Use this procedure if the PCC has already been installed on your workstation (for example by the administrator). With the installation of the settings, you link the PCC to a specific environment. Help Profit Communication Center AFAS Online logging in through text messaging will stop as from 1-1-2022 The two-factor authentication for AFAS Online by using text messaging will end on 1 January 2022. The reason for this change is that text messaging is not the safest choice as a second factor for logging in. Many parties still use text messaging as a second-factor authentication method, but in the reports on security it is clear that risks are linked to this. For example, logging in through text messaging is vulnerable to interception. Do you still use text messaging? We then recommend you switch to logging in by using AFAS Pocket. This is safer and you do not have to enter the code, making it easier too! Confirmation through text messaging will, however, continue for the first registration and when using a new telephone number. Contents What are the alternatives to logging in through text messaging? How do I inform my users to switch to AFAS Pocket? What happens if I do not take action? What are the alternatives to logging in through text messaging? What are the alternatives to logging in through text messaging? Signing on by means of AFAS Pocket Signing on by means of single sign-on Logging in by using text messaging through Messagebird For this, you subscribe to Messagebird. This is at your own expense and risk. Logging in through another authenticator appIt is possible to use two-factor authentication through a third-party app such as Duo, Microsoft or Google. You can also log in through a colleague but we do not recommend this as a structural solution.Note: Users who can log in at several organisations must log in through AFAS Pocket. It is not possible to log in through a personal text messaging service. The reason for this is that we cannot determine which organisation should pay for the text message. How do I inform my users to switch to AFAS Pocket? 1. Check which users are still using text messaging Through Profit Windows, an analysis is available that gives an overview of the users that still use text messaging as a second factor for logging into AFAS Online. You can run the analysis per subscription/participant number. Do you have several subscriptions? Generate the analysis for each subscription to gain insight into the users who still log in through text messaging. You can consult the analysis by performing the following steps: Go to: General / Environment / Management / Properties , AFAS Online tab. Double-click the setting Analysis of text messaging uses when logging into AFAS Online . In the Value field, enter the email address linked to your user. Read the explanation and click OK and, next,YES at the message. You will receive the analysis in your mailbox in about 15 minutes. Depending on the size of the analysis, this may take a shorter or longer time. Analysis explanation The analysis shows the users for whom text messaging is linked as a login method. The second column shows which of these users logged in with text messaging in the past month. Users who have linked AFAS Pocket as their login method are not included in the analysis. 0 means that the user has not logged in with text messaging in the last month. 1 means that the user did log in last month using text messaging. In the view in the Authorisation tool , you can subsequently filter on the user codes from the analysis. This view can be exported to Excel by using the 'green arrow'. 2. Inform the users who still use text messaging Through the analysis above, you have insight into the users who still log into AFAS Online through text messaging. To help you inform these users, we have drawn up a step-by-step plan explaining how to change the login method from text messaging to AFAS Pocket. Several accounts can be linked to AFAS Pocket. The step-by-step plan is available as: Dutch PDF file English PDF file Dutch customer portal page English customer portal page Use (one of) these options to inform your users. If you choose to purchase your own text messaging service or configure single sign-on, it is not necessary to inform your users. Note: To continue to log in successfully, use one of the following browsers: Google Chrome, Microsoft Edge, Mozilla Firefox or Safari. Ensure your users are not using Internet Explorer. We have not supported this browser for some time. It's this easy to log in by using AFAS Pocket! You can send the video below to your employees with the link https://www.youtube.com/watch?v=RFn-dQFy7SA . What happens if I do not take action? If you do not take action, you will no longer be able to log in using text messaging as from 1 January 2022. You must then log in (each time) through a colleague. You do this as long as you do not use any of the above alternatives. Help Log in Authorisation Filter variables You can filter using variables (or filter tags) instead of fixed values. This is especially useful in filters you save for reuse. You place the variable between square brackets in the filter field. One of the most widely used variables is [Today ], which filters by today’s date. If you want to filter by a text starting with a square bracket ([), you should not end the filter with a square bracket (]). This means that the text is not treated as a variable but as regular text. For example: [pro In this case, the text is not considered to be a tag, but regular text. See also Filter variables (Dutch) Filter variables (English) Filter variables (French) Help View data Pocket App AFAS Pocket is an app that enables 'mobile working' with Profit via a smartphone or tablet (on supported versions of Apple iOS and Android). Pocket and the new sign-on method AFAS Online customers will switch to the new sign-on method in phases as from halfway through June 2018. AFAS Pocket plays an essential role within this context. After all, you use AFAS Pocket when signing on based on two-factor authorisation . If you only use Pocket for two-factor authentication, you do not have to configure Pocket. Your users download the app and they also activate AFAS Pocket during the first sign-on for two-factor authentication. Pocket as an ERP tool You will always have access to all types of important ERP function with Pocket, in particular, in relation to Employee Self Service. If you use this solution, you must implement the configuration in Profit. AFAS Pocket is seamlessly integrated with the Profit back office and provides the following options: Fast insight into open actions and process your tasks and alerts by pressing a button once. You will always know what is going on in your organisation through the newsfeed. View the file of the (customer) contact for the most up-to-date information or call them from the app. Enter hours in relation to the correct project and the accounting will have been completed. You can enter a claim quickly by using a photo of an invoice or form. You can also claim travelling expenses fast and easily. Direct insight into your pay slips and annual statements. Enter your leave days using the Pocket App. You can also see the remaining balance. Report sickness and recovery through the app so that your manager is informed. Description For the data traffic between Profit and AFAS Pocket, a proxy server is used which is managed by AFAS. This applies to both AFAS Online and local installations. By using a specific proxy server, an end user of the app does not have to specify a URL for the communication with Profit. The end user only specifies an environment key. He/she will receive an email back afterwards with an activation code that he/she can use to definitely starting using the app. Data traffic between Profit and the proxy server takes place through a secure point-to-point connection. Configuration in Profit: Install AFAS Pocket on your smartphone Use AFAS Pocket on your smartphone Procedure Install AFAS Pocket on a smartphone or tablet Exit AFAS Pocket Configure and manage AFAS Pocket Also see Approve hours Frequently asked questions on the AFAS Customer Portal Help AFAS Pocket Configure InSite The configuration of InSite consists of a technical configuration and the configuration of the functionality in Profit Windows. Preparation Browsers supported Procedure Install InSite Set up the main InSite site Start InSite using a shortcut InSite Authorisation Log on to InSite or OutSite using social media Change the login page Display photo of logged in user Configure the process for a forgotten password Theme editor Layout and zones Menu of the site Configure the site functionality Document management Configure input form InSite & OutSite Profiles Media gallery Help Configure Use a quick filter The quick filter is a simple filter that will give the desired result in most situations. You enter the quick filter in the view and can easily change it. The quick filter is not case sensitive. If you click in the quick filter, you can use F12 to view a Help window with information about filter options. In InSite the quick filter is available in all web sections with a table layout, meaning views with columns. Note: When opening a view, a filter can be applied automatically . This can cause the view to display less data than you expected. You can tell whether a filter has been applied by looking at the filter button: Contents Quick filter Multiple values Does not contain Begins with / ends with From...to Empty field Multiple fields Copy a field value to a quick filter Quick filter Every view has a filter bar. You filter a particular column by entering the filter value in the filter bar. Quick filter on one value: Open the view:. Click in the quick filter of the column to be filtered. Enter the filter value. Press: Enter.Profit shows all lines containing the search value, regardless of case. Note: In Profit Windows you clear the quick filter using Ctrl+L. Multiple values When you search for multiple values, you have two options: OR filter: field must meet one of the filter criteria. AND filter: field must meet all filter criteria. Quick filter on multiple values (OR filter): Specify multiple search values, separated by a ; (semicolon). Press: Enter.Profit shows all lines containing the search value, regardless of case. Quick filter on multiple values (AND filter): Put a # in front of the search values. Does not contain You filter the lines in which a certain value is not present. Does not contain: Enter a ! in the quick filter, followed by the search criterion. Press: Enter.Profit shows the lines that do not contain the value. Begins with / ends with You filter the lines in which a field starts or ends with a certain value. Starts with: Enter a @, followed by the filter criterion. Press: Enter. Ends with: Enter the character &, followed by the filter criterion. Press: Enter. From...to You filter on a range of values. From/To: To specify 'From.. to', you enter .. (2 points). Press: Enter. Profit shows names starting with an A or a B. Empty field You filter on fields that do not have a value or on fields that do have a value. To filter on fields that do not have a value: Enter: [ ] (opening and closing square bracket). Press: Enter.Profit shows the lines on which this data element has not been recorded. To filter on fields that do have a value: Enter ![ ] . Press: Enter. Multiple fields If you apply a filter to multiple fields, Profit always applies the AND-filter: Profit will only show lines that meet all criteria. For an OR filter, use an advanced filter . Quick filter on multiple fields: Enter filter values in the columns. Press: Enter. Copy a field value to a quick filter You will copy a value from a view to the quick filter. To copy a field value to a filter: Open the view:. Select the value. Press: (Ctrl+Plus).This places the selected value in the quick filter. If you press (Ctrl+Minus), the filter is reversed, meaning records containing the selected value are excluded. For example, !Jansen means not Jansen . You can also use:Right-click on the value. Run filter / Filter by selected field to copy the value to the quick filter. Run filter / Everything except selected field to reverse the filter, excluding the records containing the value. For example, !Jansen means not Jansen . You see only the lines that meet the specified filter criteria. Right-click in the view and go to Run filter / No filter (Ctrl+Shift+D).This undoes the filtering, but the filter criteria are retained in the quick filter. You can then further refine the filter. After you have entered a quick filter, you can decide to proceed in the Filter window . Copy the quick filter you entered to the Filter window using Ctrl+Shift+H. Help View data UpdateConnector descriptions This topic contains an overview of all UpdateConnectors supported by Profit and the details on each UpdateConnector. Note: You can retrieve a list of fields to be supplied for each UpdateConnector and generate an XML example. See the description for AFAS Online or for a local installation . Content General CRM Financial HR Order management Projects Subscriptions General Users (KnUser ) Custom files (KnCustomK01 - KnCustomK10 ) Custom contact files (KnCustomLinkCxx ) CRM Persons (KnPerson ) Organisations / contacts (KnOrganisation ) Change contacts (KnContact ) Dossier items (KnSubject ) Response to dossier item or forwarding a dossier item in a workflow (KnSubjectWorkflowReaction ) Course planning (KnCoursGroupLines ) Course participants (KnCourseMember ) Participants in a session (KnCourseSessionMember ) Events and sessions (KnCourseEvent ) Deviating issue methods by organisation/person (KnProvApplication ) Forecasts (CmForecast ) Financial Sales contacts (KnSalesRelationOrg / KnSalesRelationPer ) Purchase contacts (KnPurchaseRelationOrg / KnPurchaseRelationPer ) Ledger accounts (KnAccount ) Allocation codes (KnDimCode ) Ledger entries (FiEntries ) Budgets (FiBudget ) Financial invoices (FiInvoice ) Current rates (KnCurrencyRates ) SEPA collection mandates (FiSepaDirectDebit ) Bank transaction codes (KnBankTransaction ) Contracts (FiContract ) Reservations (FiReservation ) Obligations (FiCommitment ) Procuration lines (FiProcuration) Fixed assets (FiFixedAssets ) HR Employees (KnEmployee ) Applicants (HrApplicant ) Applicants - applicant self service (HrCreateApplicant ) Wage entries (HrCompMut ) Parameters (HrVarValue ) Absence entries (HrIllness ) Close absence (HrWellnessInSite ) Leave entries (HrAbsence ) Leave balance corrections (HrAbsCorrection ) InSite declarations (HrDeclarationInSite) Employer cost centres (HrCostCentre ) Add employer cost units (HrCostCarrier ) Add employer jobs (KnOrgEmrFun ) Employee assessments (HrJudgement ) Belgium Belgian time registration lines (HrTimeRegSocSec ) Order management Quotations (FbSalesQuotation ) Desk/direct invoices (FbDirectInvoice ) Sales orders (FbSales ) Release orders (FbFreeOrder ) Purchase orders (FbPurch ) Receipts (FbGoodsReceived ) Packing slips (FbDeliveryNote ) Articles (FbItemArticle ) Product group (FbProductGroup ) Product group lines (FbProductGroupLines ) Preparation for transfer between warehouses (FbWarTransferPrep ) Warehouse transfer shipping slips (FbWarTransferOut ) Warehouse transfer receipt slips (FbWarTransferIn ) Articles with multiple units (FbUnitBasicItem ) Extra barcodes for articles (FbExtraBarcode ) Barcodes for dimension articles (FbUpdateAdB ) Assembled items (FbComposition ) Assembly preparations (AssemblyPrep ) Article sales prices (FbSalesPrice ) Article purchase prices (FbPurchPrice ) Warehouse allocations for article (FbItemCodeWarehouse ) Multiple suppliers for an article (FbItemCodeSupplier ) VAT rate group per item (FbBitVatTarifGroup) Stock (FbStockMutation ) Projects Actual costing (PtRealization ) Actual costing per week ('PtRealizationWeek ') Actual costing to be invoiced (PtLinesToBeInvoiced ) Update projects and project phases (PtProject ) Teams and team members (KnTeamMember ) Cost estimate (KnQuotation ) Project progress (PtProjectProgress ) Invoice instalments (FbInstalment ) Monitoring codes (PtMonitor ) Forecast per project (PtConProjectForecast) Subscriptions Subscriptions and subscription lines (FbSubscription ) Help UpdateConnector Delete an environment (AFAS Online) In AFAS Online, you can delete environments that you no longer require yourself. To delete an environment: Go to: General / Environment / Management / Delete . Select the environment that you want to delete.You can delete multiple environments at the same time. Press and hold the Ctrl key and click on the environments one after the other. Click on: Delete . Confirm deletion of the environment. The environment you have selected will be permanently deleted. To delete an environment as administrator: Log on as the administrator . Go to: Management / Environment / Delete . Help AFAS Online Logging into AFAS Online for the first time using two-factor authentication. You need a new password for the new sign-on method using two-factor authorisation. You will create this password in this step. It is easiest, but not compulsory, to immediately download AFAS Pocket afterwards and to link it. Note: If you cannot carry out these steps, read the separate explanation about the activation email. This page does not apply with regard to single sign-on. The Profit administrator in your organisation will specify how you need to sign on with regard to single sign-on (SSO). Contents Preparations Logging in Setting up two-factor authentication Preparations You use a supported Microsoft Windows or Apple Mac version. You use a supported browser. See also: Administrator preparations Logging in Go to www.afasonline.nl .The sign-on screen will be displayed. Enter your email address.Use the email address that the Profit administrator has recorded in your organisation. This is usually your business email address. If you do not know which email address you should use, contact the Profit administrator. Click Next . A message will be displayed that you have never signed on before. Click Get started . You will receive an email message that will include a code. If you have not received the message, see the FAQ . Enter the code on the portal page. Click Next . Enter a strong password.Which requirements must the password meet? The length must at least be 12 characters. You have not used the password before. The password does not contain part of your email address. The password does not appear on the list of leaked passwords . Click Next . Enter your telephone number if it is not automatically displayed. If you enter a number yourself, this will not be recorded in Profit. Click Next . Confirm the text message code that you will receive through your telephone. For the blind and visually impaired, it is also possible to have the login code read out. Use a landline number instead of a mobile phone number. When you log in, you will receive a call on this landline number after which the code will be read out. The reading is done by your telecom provider. AFAS cannot influence how this happens. Setting up two-factor authentication As from now, you will always log into AFAS Online through two-factor authentication. You are going to set this up now. Make your selection on the following screen.Note: We recommend confirming through AFAS Pocket. This means that you can complete the login process at the touch of a button. With other methods, you always have to enter a code. The explanation below is focused on AFAS Pocket, followed by an explanation of other methods. Select Log in through a notification through AFAS Pocket (recommended) Click: Next . Download and install the AFAS Pocket app on your phone if you have not done so already. Click: Next . Press I have a QR code in AFAS Pocket if you want to link your phone using AFAS Pocket. Give your permission to use the camera and scan the QR code If you have correctly scanned the code, a message will be displayed stating that your AFAS Online account has been linked to AFAS Pocket. Click To login and continue with these steps . Do you want to link another account to AFAS Pocket? No problem! Open AFAS Pocket. Tap the shield at the top. If this is not shown, go to Settings /Two-factor authentication . Click + Scan the QR code. Other methods: Log in through a confirmation code through the authenticator app You want to log in with a third-party authenticator app such as LastPass, Duo or Microsoft. Make the following choice during the login process: Click Next . Open the app on your phone (for example Duo Mobile, Google Authenticator, LastPass Authenticator or Microsoft Authenticator). Next, scan the QR code on your screen. The app will give you a code of six digits. Enter it on your screen and click Activate . If you have correctly scanned the code, a message will be displayed stating that your AFAS Online account has been linked. Click To login and continue with these steps . Log in through a confirmation code sent in a text message You will receive a confirmation code through text messaging when you log in. Note: This can be done until 31-12-2021. After that, you have to switch to logging in through AFAS Pocket or an external authenticator app. Do you want to continue using text messaging in 2022? Messagebird must then be set up by your organisation's administrator. After setting up Messagebird, logging in through text messaging is only possible if your email address is registered for a single participant number. If the email address is registered for several participant numbers, you still need to log in through AFAS Pocket or an external authenticator app. Make the following choice during the login process: Click Next . If the code is correct, a notification will follow that your AFAS Online account has been linked. Click To login and continue with these steps . Help Log in Authorisation Configuring AFAS Pocket for each environment You configure AFAS Pocket per environment and you specify which users are allowed to use AFAS Pocket. You also specify which components of AFAS Pocket you are going to use. Note: Changes to the configuration will not be immediately displayed in the active AFAS Pocket sessions. It may take 30 minutes before, for example, activated or deactivated functions are implemented in the active AFAS Pocket sessions. If a user starts an active AFAS Pocket session after a change has been implemented in Profit Windows, it will be immediately displayed in AFAS Pocket. Contents Authorise administrator Authorise users Unblock and configure the Pocket App Configuring claim profiles Who is Who User language Authorise administrator You authorise the administrator for maintaining the app connector. Authorise administrator: Go to: General / Management / Authorisation tool . Go to the tab: Group maintenance . Select the user group with the application or process administrators of the Pocket App. Go to the tab: Menu . Select the check box for the menu options to be authorised:General / Pocket App / Settings General / Pocket App / Users Go to the tab: Authorisation . Authorise the tabs: Close the Authorisation tool . You do not have to reopen the environment. Authorise users You add a separate user group for users that are allowed to use AFAS Pocket. Add the users in question to the group. The app does not have authorisation levels. Users who are members of this group, can use the functionality that you have activated in the AFAS Pocket App. Filter authorisation (for example based on persons or organisations) always applies. Note: If you want to use the extensive functionality (workflows, signals, documents, etc.) of AFAS Pocket, every user must be linked to an employee with a current employment contract in Profit HRM. To authorise users: Go to: General / Management / Authorisation tool . Go to: Group / New (or click on ). Enter the name. Click on: Finish . Go to the tab: Group maintenance . Select the new group. Go to the tab: Users in group . Deselect the Show selected items only check box. Select the users that you want to add to the group. Check for each user if the properties have been recorded correctly:Go to the tab: User maintenance . Open the properties of the user. The email address of the user must be entered. Go to the tab: Applications . At least one of the applications must have been selected. If not, the user will not have access to the connector app. Close the Authorisation tool . You do not have to reopen the environment. See also: Add a user group Add a user to a group Filter authorisation: The filter authorisation based on organisations/persons and file items also has an effect in AFAS Pocket. AFAS Pocket keeps validity combinations into account when entering hours. You determine which employees are visible in AFAS Pocket and which fields will be displayed in the Who is Who settings. See also: Authorisation with data filters Unblock and configure the Pocket App You must activate the app in every environment which can be accessed from AFAS Pocket. It may be the case that settings that are changed in Profit Windows are not immediately implemented in AFAS Pocket. This can, for example, occur if you change the settings of a leave type. Select Settings/Refresh configuration to immediately have available the new settings in AFAS Pocket. This may be useful when testing AFAS Pocket. To configure the Pocket App: Go to: General / Pocket App / Settings . Select the user group whose members are allowed to use AFAS Pocket.Other important settings: If employees use AFAS Pocket to enter leave, select the leave type that employees use to enter leave. Always select a composite leave type. If employees charge travel expenses, select the cost type the employees use to enter travel expenses. If you want to use Google location data in AFAS Pocket, create a Google Maps API Key . Go to: General / In & OutSite / Site . Open the properties of the site. Go to the tab: Google . Click on: API console (after the Google Maps API key field).The Google website appears. Log on to the Google website. If applicable, add a project. Click on: 'Use Google APIs '. Click on: 'Google Maps JavaScript API' . Click on: 'Enable API '. Click on: 'Go to Credentials '. Select the following values: Click on: 'What credentials do I need '. Click on: 'Create API Key '. Copy the value from the 'Here is your api key ' field to the clipboard. Return to Profit. Paste the code in the Google Maps API key field. Note: The following applies as from 11 June 2018: Do you not have Google ? Maps API key set in Profit (for InSite, OutSite and/or Pocket), the Google Maps plug-ins will then no longer work. An API key has been set: The first 1000 requests per 24 hours are free and do not require changes to the Google account. If more than 1000 requests are made per 24 hours, you can increase the number of free requests by enabling 'billing' in the Google account under which the API key has been requested. You must enter credit card details within this context. You will then be entitled to 150,000 requests free per day. You can immediately check whether billing has been enabled by using the Google Transition Tool and, if required, you can link a credit card.As from 11 June 2018, there must be a Google billing account with a credit card linked to the API. Use these steps to check this and, if required, to immediately link a credit card. Open the Guide for existing users page for Google. Click Transition tool. Sign on using your Google account. Find the project that you use for AFAS. Click Add billing . Click Create billing account . Enter your billing data and credit card data and click Send and activate billing . You work with AFAS Online? If your set key ends in 5GpE32k , you use an AFAS key that is linked to a billing account. You then do not need to do anything. If you have a different key or no key, the above points apply. The travelling distance will be determined based on the quickest or shortest route. Determine yourself the calculation method in the app connector. This method applies to all users. The fastest route does not necessarily mean the shortest one! It can therefore be the case that more kilometres are claimed than really driven. If the Fastest route field has been selected, the fastest route will be calculated using Google Maps without traffic pressure. If the Fastest route field has been selected, the shortest route will be calculated based on Google Maps without including traffic levels. Go to the tab: Activation . Select the components you want to use In AFAS Pocket.If you activate Document management , the News component will also be displayed in AFAS Pocket. If you activate searching, you must also configure the Search in InSite functionality. To activate the Pocket App: Only carry out these steps if you want to release AFAS Pocket for use by users. Go to the tab: General . Deselect the Blocked check box. Go to the Environment key tab. Click on: Generate (after External key ). You give this key to the users who are going to use AFAS Pocket.You can offer a QR code in combination with AFAS Pocket version 1.02.74 or higher. Download the QR code and offer it to users, for example, by email. The user can read in the QR code by means of AFAS Pocket and does not have to enter the external key manually. Note: If you already have an external key and then generate a new external key, the old key becomes obsolete. Your users will no longer be able to use AFAS Pocket. You must first give the new external key to the users and every user has to register again. Note: As from Profit 6, you can clear the environment key of the app in a copied environment without this deleting the environment key of the live environment. This ensures that users can simply continue to work with AFAS Pocket because it will continue to be linked to the live environment. You can generate another environment key for AFAS Pocket in the copied environment. Record the InSite main site: Users of the Pocket App can still view documents to be read, add possible responses and approve documents. You must record the InSite main site for this component. Do this as soon as possible because, if not, Pocket App users will see the An already published InSite is not linked to the Pocket app. message Go to: General / Environment / Management / Properties . Go to the tab: General . Select the site in Main InSite site . Click on: OK . Click on: OK . Configuring claim profiles You can use the claim profiles both in InSite and AFAS Pocket. Once you have created the claim profiles, you determine which claim profiles may be used in AFAS Pocket. Your employees use these profiles to submit claims through AFAS Pocket. You can determine yourself which fields a user must provide a value for in relation to a new claim, which fields require input, etc. by using a claim profile. This will prevent errors from being made and the claim process will run smoothly. Configuring claim profiles: Configure the required claim forms. Users must have access to the EES profile choice claim page. If they do not, the Submission profile not authorised message will be displayedCheck the authorisation through General / In & OutSite / Page . Go to: General / Pocket App / Settings . Go to the Activation tab. Select the Declarations check box. Go to the Claim profiles tab. Click New and select the required profiles. You can only select creation profiles here.Note: Pocket users must be authorised for the corresponding creation pages in InSite. You do this by adding these pages to the correct functionality. After configuration, users can submit claims based on the profiles: Using claims but without claim profiles: Go to: General / Pocket App / Settings . Go to the Activation tab. Select the Declarations check box. If you do not link claim profiles, a user in AFAS Pocket can choose between General costs and Travel expenses when claiming. Who is Who You can display the Who is Who component on AFAS Pocket so that users can easily contact colleagues. Three settings are important within this context: The Who is Who component is/is not available on AFAS Pocket. If the component is available, you determine which fields will be displayed. If the component is available, you can determine which employees can be viewed by using a filter.Conversion to Profit 7: You can deselect specific Who is Who fields in the Management Tool. This method could be used for both InSite and AFAS Pocket up to Profit 6. In Profit 7, the settings below apply with regard to AFAS Pocket. The Management Tool no longer applies. During the conversion to Profit 7, a check will be performed to determine whether the Private contact data tab was hidden in the management tool. If it was, the following fields will be deselected in the screen below: the fields of the private address, private telephone number, date of birth, Facebook, LinkedIn, Twitter, the image, private mobile phone number and nationality. configuring who is who: Go to: General / Pocket App / Settings . Go to the Activation tab. Select Who is who if you want to make this component available on AFAS Pocket. If you do not make this component available (the field has been deselected), you do not have to carry out the steps below. Go to the Who is who tab. Select the fields that you want to show in AFAS Pocket. Keep the privacy policy of your organisation in mind within this context. Also keep in mind that not all field combinations are logical because fields in AFAS Pocket are displayed one after the other using a fixed sequence. Test this as soon as possible in Pocket after you have changed the settings.To view the name, you can, for example, select the Full name field and deselect the other name fields (nickname, first name, prefix and surname). If you want better control over the view of the name, deselect Full name and select the other required fields. Set the filter if a user may only view specific employees in AFAS Pocket.A fixed filter is always used when retrieving employees. This is integrated into the system and cannot be changed. Employees will only be displayed if they meet the following conditions: the employee is employed at the company, the employee has not been blocked and the employee has the Employed status. If you do not set a filter, the user in AFAS Pocket van view all employees who meet the conditions. the [employer] filter tag has been used in the example and therefore the employee in AFAS Pocket can only view employees of the employer where he/she also works. He/she will not see employees of other employers. Click Example to check the settings. You see a view with the selected fields and the application of the filter. Refresh Pocket App: It may be necessary that Pocket App users must refresh their configuration to implement the change in Who is Who. Open Pocket App on your smartphone. Go to Settings /Refresh configuration . User language The user determines in which language he/she will use the app in the AFAS Pocket settings. This only applies in relation to languages supported by AFAS. When creating a leave entry, the user can select the Leave reason in his/her own language and, when creating an absence entry, the user can select the Absence reason in his/her own language. Note: The Absenteeism reason field is no longer available. The user can select the absenteeism type. You do not have to translate this table yourself. Administrator's actions: The administrator must add the correct translations in Profit to the custom Leave reason and Absenteeism reason tables. The Leave type table cannot be translated. It will always be displayed in the base language. AFAS cannot convert this table into a custom table. If you use several languages, you must determine what is the best option with regard to this table. Help AFAS Pocket Install AFAS Pocket on a smartphone or tablet Congratulations! You get started with the AFAS Pocket App. Download and install AFAS Pocket App on your smartphone: You download the app, install it on your smartphone or tablet and log in. Once you are logged in, the smartphone or tablet is linked to a Profit environment and you can get started with AFAS Pocket. Users can only perform these steps after the administrator has configured AFAS Pocket in Profit Windows. Note: For this process, you need an external key (a code), which you can obtain from the administrator in your organisation. Perform the following steps on your smartphone or tablet. Open your browser. Open the https://klant.afas.nl/pocket site. Click on the appropriate button to download the app from the App Store or Google Play. The minimum supported version of iOS or Android is specified at the description of the app. Install the app. Enter your (work) email address or Profit user name.If you are using AFAS Online, your username always starts with the participant number, for example 12345.keesz . Enter the environment key. The Profit administrator in your organisation will give you this. Note: You can scan a QR code instead of manually entering the code as from Profit 6 in combination with AFAS Pocket version 1.02.74 or higher. Click on: Log in .You receive an email message containing a code for one-time use. If you do not get a message, contact the system administrator in your own organisation. Go back to AFAS Pocket and log in using the one-time code. Enter a PIN code to be used to secure AFAS Pocket. Additional information: In the AFAS Pocket settings, you have the following options: Change languages Record a different PIN code View the support code. In the case of an error message, AFAS Support may ask you for a support code to search for the error message. Refresh configurationIt may be the case that settings that are changed in Profit Windows are not immediately implemented in Pocket App. This can, for example, occur if you change the settings of a leave type. Select Settings /Refresh configuration to immediately have available the new settings in AFAS Pocket. You can, of course, also use AFAS Pocket if you have a connection with a Wi-Fi network. If this does not work correctly, the network administrator must whitelist the refinery.afaspocket.nl (IP 104.40.210.25) address. The administrator must whitelist auth.afasonline.com (IP 185.46.182.10) to accept messages and to use the new sign-on method. Help AFAS Pocket Alerts Alerts are used to draw the attention of users to important events such as an anniversary, the end of a temporary employment, when a payment deadline is exceeded or when a large order has been won. Description Profit generates an alert when a certain situation arises. This alert goes to specific recipients and has a specific message text. The user reads the alert, takes action, if necessary, and completes the alert. This ensures that every day the most pressing matters are dealt with. Below, the most important parts of alerts are discussed. Alert type There are two alert types: Data-basedThese alerts are generated on the basis of a field value. If the field has a specific value, the alert is generated. Date-basedThese alerts are generated on the basis of the date on which an event takes place. These alerts can be displayed a number of days before and after the event. Example: An alert that is generated because a €10,000.00 order has been scored, is data-based. An alert that is generated because an employee has a birthday coming up, is date-based. Destination The destination of an alert determines who receives it. For example, you can send an alert to all members of a group, to the manager of an employee or his/her substitute. A combination of destinations is also possible: for example, you want to inform all team members of the employee whose birthday is coming up, but in case of an anniversary, you want to include management as well. You can also use a workflow as a destination, so that you can start the workflow automatically if a particular event occurs. Alert text The text of the alert is the message that a user receives together with the generated alert. You can create this text yourself, combining regular text and fields (data) from Profit. You can create a separate alert text for every language included in your licence. Generate alerts It is recommended to generate alerts automatically every night: For a local installation, use the SIGNAL command line . Do this after midnight, so that the alerts are based on the current date. If you use Profit HR, first update the current data before you generate the alerts. In AFAS Online, active alerts are generated automatically overnight. Your users can view alerts in InSite, or they receive the alert in an e-mail message. If you are testing alerts, you can also view the alerts in Profit Windows. The purpose of this functionality is to test alerts during the implementation phase, it is not meant for regular use. Sample alerts in Profit By default, Profit has a great number of sample alerts. These alerts can be recognised by the word (Profit) in their names. You cannot apply these alerts directly because they are data that has been supplied with Profit. In practice, you usually have to copy these alerts and then modify them. However, you can also add a new alert based on a data collection. Procedure Add alerts You copy a default alert supplied or you add a new alert based on a data collection of your choice. Change alerts You can only change alerts if you are authorised to do so. This is only possible for alerts that you have added, not for the default alerts supplied. Generate alerts You can generate alerts in two ways: manually or via the Command Line Utility. For alerts that you generate regularly, for example, every night or every week on a fixed day, we recommend you use the Command Line Utility. Alerts in InSite Two separate overview templates are available in InSite. The only alerts shown are the ones that are intended for the user who is logged on. Block alerts If you do not want to generate an alert, you should block this alert. Clear alerts If you do not want to use the generated alerts, you can clear them. Also see Alerts in InSite Two separate overview templates are available in InSite. The only alerts shown are the ones that are intended for the user who is logged on. Alerts for Logistics Alerts warn you of issues that require your attention in the near future. Profit has a number of alerts to point out logistical issues. Help Workflow management Logging in and out on the AFAS Customer Portal with two-factor authentication You log into the AFAS Customer Portal with your email address and password. From July 28, 2021, two-factor authentication is required and you must confirm the login via your smartphone. As a result, your data will be extra protected. Contents Login Switch to two-factor authentication beforehand Activating two-factor authentication with browser extension Information for managers Login The password of the Customer Portal is AFAS's password. This is a different password than the password to log into an environment in AFAS Online. To log into the AFAS Customer Portal: Go to: klant.afas.nl . Log in with your email address (this is your username) and your password.Please note: The following steps only apply if you have already activated two-factor authentication. If you have linked to AFAS Pocket, you must confirm logging in with Pocket. If you have linked to another authenticator app, start this app on your phone. Transfer the verification code to log into the Customer Portal. Log in at multiple organisations: If your email address is known to several organisations, select the required organisation after logging in. If you are already logged in, click your name (top right corner). Then click Select organisation . Logout: Click on: the name (at the top on the right). Click on: Log off . Switch to two-factor authentication beforehand Please note: As from 28 July 2021, it is no longer possible to log into the AFAS Customer Portal without a smartphone. You must use an authenticator app (AFAS Pocket or another authenticator app). You need a smartphone for this. See, for example, the Alcatel in the Media Markt . Preparations You need a smartphone: keep it near you. An authenticator app must be installed on your mobile phone: AFAS Pocket, version 1.6.78 or higher. This allows you to confirm with one click of the button. External authenticator app such as: Duo Mobile, Google Authenticator, LastPass Authenticator or Microsoft Authenticator. When logging in, the app will give you a code that you need to enter on the Customer Portal. To log into the AFAS Customer Portal: Go to: klant.afas.nl . Log in with your email address and your username. Click your name / Account security . Click Two-factor authentication . Click: Activate . Enter your password and click Verify . Click the method that you want to use for two-factor authentication. Method 1: Log in by simply pressing one button (AFAS Pocket) Click: Log in by simply pressing one button . The following screen will be displayed. Open AFAS Pocket on your smartphone. Tap the shield at the top. If this is not shown, go to Settings /Two-factor authentication . Press + to add an account. Scan the QR code on your screen with your phone. Wait until your screen shows that the link is successful.Please note: Just installing the app is sufficient if you only want to use the app for logging in using two-factor authentication. The Activate all functionality option only applies if you also use the other functions of AFAS Pocket (request leave, reporting sick, etc.). Method 2: Logging in with a verification code You use your own authenticator app. Click: Log in with a verification code . Open the app on your phone (for example Duo Mobile, Google Authenticator, LastPass Authenticator or Microsoft Authenticator). Next, scan the QR code on your screen. The app will give you a code of six digits. Enter it on your screen and click Activate . If you cannot activate two-factor authentication with another authenticator app, watch this video . Are you still stuck? Unfortunately, we cannot offer support when you wish to activate an external app. Activating two-factor authentication with browser extension We recommend logging in with a smartphone because the second factor is approved on another device. If you cannot use a smartphone because of your principles or health issues, you can log in via the LastPass browser extension or another secure TOTP add-on. You can find these by searching for 'TOTP Authenticator' in your browser. A few examples are given below. Please note: Support does not provide any support in relation to this. If the steps below do not manage to help you, contact your own system manager. Install the TOTP Authenticator: Search for 'TOTP Authenticator' in Google. For example, you can use this free authenticator of Google Chrome or this free authenticator from Mozilla Firefox. Log into the AFAS Customer Portal and set up two-factor authentication using the method: Log in with a verification code . Click the extension of your Authenticator and click the square box to find the QR code (see the figure) or follow the instructions on this page. Select the QR code on the AFAS Customer Portal by dragging a box around it with your mouse. Next, enter the 6 digit code in the Verification Code field on the AFAS Customer Portal. Install the LastPass browser extension If you do not have LastPass yet, first create an account via: https://www.lastpass.com/nl/ . In addition, ensure you install the LastPass's browser extension . Please note: This option is only available with a paid LastPass subscription. Link two-factor authentication via a browser extension Go to: klant.afas.nl . Log in with your email address and password. Click your name/Account security . Click Two-factor authentication . Click: Activate . Enter your password and click Verify . Click: Log in with a verification code . Go to your LastPass extension and choose Add /Password . Next, fill in the fields. In the Username and Password fields, enter the email address and password that you use to log into the AFAS Customer Portal. Next, click Enter your secret code. Enter the code under the QR code on the AFAS Customer Portal (see the figure) and click Activate and subsequently Save . Open your LastPass extension and copy the one-off code by clicking Copy TOTP . Paste this code in the Verification code field in the AFAS Customer Portal. LastPass will now have been linked to logging into the AFAS Customer Portal. Log in after activating Go to: klant.afas.nl . Log in with your email address and password. Open your LastPass extension and click Copy TOTP . Use this code to log into the AFAS Customer Portal. Information for managers AFAS never sends passwords to third parties and will never ask you to do so for security reasons. A user has access to the AFAS Customer Portal subject to two conditions: The administrator in the organisation has recorded the user data in the AFAS Customer Portal. Your current email address has been recorded in the AFAS Customer Portal. If the user is not known as a contact, your administrator can add the user. Help AFAS Set the email server and sender Profit can generate and sent email messages. The email application (installed on your own PC) is not used within this context. In Profit you record various settings, including the email server to be used. Contents Guidelines for emailing in relation to AFAS Online Where in Profit do I configure the sender of an email message? Configure the AFAS Online mail server Configure your own mail server (incl. Gmail and Office 365) Domain Key Identified Mail (DKIM) as an extra security tier for sending emails Configure the checking policy for recipients on the sender's domain (DMARC) SendGrid (sending large quantities of email) Exchange Online via Azure AD Connect Guidelines for emailing in relation to AFAS Online Recommendations to successfully sending email messages through Profit. Email addresses of those addressed Ensure you have an email address file that is up-to-date and correct in Profit.If a large number of email messages are sent to invalid addresses from AFAS Online, this may lead to the AFAS Online mail server getting a bad reputation. The AFAS Online mail servers may even be blocked because these invalid addresses are identified as being spam. Invalid/refused email messages therefore not only have an impact on the environment, but also on other AFAS Online environments. In addition, it is also important from customer centricity that customer data is correct. Examine refused email messages regularly and rectify incorrect addresses. Your email address: sender@domain.nl Use an existing sender for email.Send the emails from Profit on behalf of a valid domain (the section behind the @). You usually use a sender of the organisation for this such as @enyoi.nl. It is important that you are the owner of this email address/domain. If this is not the case, the first step is to register a domain name. We cannot support you in this. You must arrange this outside Profit. An email address sender that does not exist is often rejected by the receiving party because it is deemed spam. A 'No-reply' address is a non-existing sender. If you want to use a no-reply address, at least ensure that the domain where the email comes from is valid. An additional disadvantage of a no-reply address is that, as the name already infers, you cannot receive replies to the messages. This means that you will not see which emails have arrived at the addressed parties. This means that you are missing out on the opportunity of rectifying incorrect email addresses. Use a valid, existing domainValid means that a relationship can be demonstrated between the domain and the sending server. The mail server of the receiving party compares the domain of the email address using the sending AFAS Online mail server. If they do not seem to be related, this is referred to as 'sender spoofing'. The receiving mail server will not accept the email in this case. You can prevent this by changing the SPF record . Where in Profit do I configure the sender of an email message? In Profit, you can configure a sender for emails that you send from Profit at three levels. In the properties of the environment (General / Environment / Management / Properties Email tab). In the administration properties (General / Administration / Management / Properties Issue tab). Deviating sender per message template (General / Management / Message / Message template ). Profit looks from the bottom to the top within this context. This means that, if a deviating email address has not been configured in the message template, the sender of the administration will be used. Has a sender not been specified in the properties of the administration? Profit will then check the email address in the environment's properties. When manually sending a report from the Report generator , a message template is not used. Here, therefore the sender from the administration is used for this. For sending payslips and other HRM-related messages, you can configure a sender in the employer's properties. For alerts, AFAS Pocket activation mail, etc., we look at the email address that has been specified in the properties of the environment in the Sender automatic email field unless a sender has been specified in the message template. Configure the AFAS Online mail server You will be using the AFAS mail server. You must authorise the AFAS mail server to email on behalf of the sender's domain name. Next, you record the settings in Profit. Profit will log all sent email messages including the return information of the recipient (such as a bounce status and a mailbox that cannot be reached). Use this function to actively monitor outgoing email and thus improve the communication. Step 1: Authorise via the SPF record You can authorise the AFAS Online mail server by adding the AFAS mail server to the SPF record of your own domain. You inform the receiving party with this that an email message that arrives through the AFAS Online server with you as the sender, is known to you. If you do not configure an SPF record, outgoing emails will not be correctly delivered and they will be blocked. Please note: If you change the DNS of your domain name, it may lead to your website and email no longer being accessible. We recommend only to make changes yourself if you are experience in administrating the DNS. Contact your system administrator regarding this. The principle of the explanation below is: yourdomain.nl . You ask your system administrator or your web hosting partner to create or change an SPF record. Example of an existing SPF recordExample: The SPF record looks as follows: Domain name | Type | Recordyourdomain.nl txt v=spf1 mx ip4:213.76.258.8 include:spf.protection.outlook.com ~all Example of the same SPF record with authorisation for AFASExample: After the change, the SPF record will look as follows: yourdomain.nl txt v=spf1 mx ip4:213.76.258.8 include:spf.protection.outlook.com include:spf.afas.online ~all You therefore only need to add the following: include:spf.afas.online Have you added spf.afas.online to the SPF record of your own? Carry out the steps below to configure the outgoing mail server in Profit. Below, you will see the instructions of the three largest hosting providers of the Netherlands: Hostnet GoDaddy YourHosting Step 2: Configuring the mail server in Profit: Go to: General / Environment / Management / Properties . Go to the tab: E-mail . Select AFAS Online in the Mail server type field.You only need to Automatic e-mail sender enter. Enter that address in Automatic e-mail sender that will be specified in the automatically sent emails. Enter here a general email address of the organisation, for example, reply@enyoi.nl (use your own email address and not this example). Tips: Also add another different sender email address for each administration . This will prevent error messages from being sent. You can, moreover, add a deviating sender email address through the message templates for each component in the order route than used for the E-mail and Output actions. Configure your own mail server (incl. Gmail and Office 365) This is the default procedure for configuring the outgoing mail server. Configuring the mail server and recipient in the environment: Go to: General / Environment / Management / Properties . Go to the tab E-mail .Own mail server Select SMTP in the Mail server type field. Enter the mail server, for example,smtp.yourcompany.com . Gmail Copy the settings below. Enter your own email address, username and sender. Use port 587 for a Gmail account. Points of attention: If you use two-factor authentication for your Gmail account, you must configure an app password for use in Profit. We recommend transferring to two-factor authorisation if you do not use this yet. If you do not want to use two-factor authorisation, activate Less secure passwords in your Gmail account. When emailing using the Gmail mail server, Gmail does not allow that you send an email on behalf of another sender than your own email address. This is the default setting. You can, however, add extra email addresses to your Gmail account (and verify them) through the Gmail website. Then you will be able to email from Profit on behalf of these senders through the Gmail mail server. For more Information, please refer to Sending emails from another address or alias . Office 365 Copy the settings below. Enter your own email address, username and sender. Port 587 is required for an Office 365 account. Other ports are not allowed. Do not forget to configure the Send As rights (Dutch). Port and ‘Enforce secure communication’.What you enter here will depend on the settings and options of your mail server. If you have doubts, check the documentation of the mail server (service) or contact its administrator. The most secure configuration (and therefore the option recommended by AFAS) is to use port 465 in combination with the ‘Enforce secure communication’ option. Allowed ports: 465, 587 and 25.Only port 587 is allowed in relation to Office 365 and Gmail. If 'Enforce secure communication' has been activated, a correctly configured mail server will be enforced. The server name must therefore match the CN (or one of the alternative names) in the certificate. The certificate must be valid and must originate from a trusted publisher. (A self-signed certificate is therefore invalid.) For port 465, an 'Implicit SSL/TLS' connection is started with this configuration. For port 25 or 587, a connection is started with StartTLS . If 'Enforce secure communication' has been deactivated, an attempt will be made to set up a secure connection. Correct certificate data is not enforced within this context. Security risks are linked to this method: a 'man in the middle' attack is therefore, for example, possible. If the server has not configured an SSL certificate, communication will take place in plain text. This applies to ports 465, 587 and 25. Profit uses TLS 1.2 for the communication with the mail server. Or, if it is not available, TLS 1.1 or TLS 1.0. Select the Password verification required field if this verification is required on the mail server. Also enter the general username and password. The username and password: the user who you enter must have rights in relation to the mail server to email outside the domain. If you use your own mail server on AFAS Online, we recommend that you always work with a username/password and/or IP filter on your mail server to ensure that others cannot send email (such as spam) through your mail server. Allow list if required on the mail server the IP range 185.46.182.0/24 or the IP address 185.46.182.1/proxy.afas.online . Profit offers emails to your mail server through this IP address. If you do not do this, this IP address by be added to a deny list. This will mean, for example, that your email will no longer arrive at the recipient. Enter that address in Automatic e-mail sender that will be specified in the automatically sent emails. Enter here a general email address of the organisation, for example, reply@enyoi.nl (use your own email address and not this example). Tips: You can, if required, add another different sender email address for each administration . You can, moreover, add a deviating sender email address through the message templates for each component in the order route than used for the E-mail and Output actions. Error message: MailKit.Net.Smtp.SmtpCommandException: 5.7.64 Relay Access Denied ATTR36. Problem: Emails from Profit are not being sent. Sometimes, the email with the invitation sent to employees for the Pocket App is sent, but invoices/reminders, etc. not. Cause: The required IP addresses are not specified in your own allow list. Solution: See the IP addresses that are specified above See the overview of IP addresses, URLs and ciphers Domain Key Identified Mail (DKIM) as an extra security tier for sending emails If you use the mail server of AFAS Online, in addition to the SPF record, you have an additional option to secure your email flow: DKIM . This means that the emails that you send from Profit (on behalf of the mail server of AFAS Online), will be provided with a DKIM signature. This signature contains the sender (domain) of your organisation. You can request this via the AFAS customer portal. Go through the steps below after which AFAS will send you a username and password. By entering the username and password in a Profit environment at the mail server, DKIM signature will be applied from this environment for the domain for which you request this. Please note: The SPF record must be configured for the email address/domain name that is used in relation to this request. You can enter the same username and password in several Profit environments to apply DKIM signature on behalf of that domain from several environments. This process consists of two steps, that is, the request through the customer portal and the definition of the settings in the Profit environment. You can read how to add an extra domain below, for example, when you are operational in a different country. Step 1: Request via the customer portal Log on to the AFAS customer portal as the Administrator. On the customer portal, to Mijn gegevens / Abonnementen / Mijn abonnement . Click the subscription of your Profit environment.If, for example, the Profit environment is called O98765AA , the subscription is 98765 . Click: Create DKIM request . Enter the domain that you want to use in the DKIM domain field.It is important that the correct domain name is entered in the DKIM domain field. Enter here the domain for which you want to use DKIM. The domain is part of the e-mail address. Example: Your email address is eva@voorbeelddomain.nl. We only need the section that comes after @, therefore exampledomain.nl . First create two CNAME records in the DNS or your domain. This refers to the two records below where exampledomain.nl must be replaced with your domain.afasonline1._domainkey.exampledomain.nl must be created as CNAME with a reference to afasonline1.domainkey.afas.online . afasonline2._domainkey.exampledomain.nl must be created as CNAME with a reference to afasonline2.domainkey.afas.online . AFAS recommends a TTL (Time to live) of 1 hour for both CNAME records. Your system administrator can create the CNAME records for you in the DNS. It is allowed to already make the request with AFAS before the CNAME records are created. In this case, the request will be rejected with the option to have the request reassessed. It is also mandatory that you already have the AFAS Online SPF record configured before making this request. Step 2: Settings in the Profit environment You will receive a username and password through the request. Configure these as follows in Profit:Open the environment. Go to: General / Environment / Management / Properties . Go to the tab E-mail . Select Apply DKIM in relation to outgoing emails and enter the email address and password. The figure below includes example data. Enter your own data. After the configuration, your emails will be sent after applying DKIM encryption. DKIM request for an extra domain Image you once requested enyoi.nl and this domain works how you like it. You recently opened a site in Belgium and now want that the emails on behalf of enyoi.be are DKIM signed. In this case, you must restart the request and enter enyoi.be . The same checks are carried out. Only the steps in Settings in Profit are no longer necessary. AFAS will indicate that you already have a username and password in the request and that you do not again have to define them somewhere. When the request has been completed, the email messages that you send on behalf of enyoi.be will also be signed with DKIM. Configure the checking policy for recipients on the sender's domain (DMARC) You can use DMARC. In relation to DMARC, you can specify with a registration (DMARC record) on the domain from where you send emails how you want recipients to handle specific checks (such as DKIM and SPF) for emails that are sent (or seem to be sent) from your domain. This will help to limit spam or emails that are not really sent on behalf of your organisation. Since DMARC is a setting on your domain, this is something that you can configure yourself as an organisation. This is not a setting that you need to request from AFAS and AFAS does not offer support with regard to this. Contact the administrator of your domain or mail servers. If you send your outgoing email through the AFAS mail server; read how you can configure SPF and DKIM above. For more Information, please refer to https://www.dmarcanalyzer.com/nl/dmarc-2/ https://www.sparkpost.com/resources/email-explained/dmarc-explained SendGrid (sending large quantities of email) SendGrid is a party who specialises in sending (large quantities) of emails. In addition, they offer all types of tools to analyse your email flow. Please note: AFAS does not offer support with regard to the configuration of SendGrid; contact SendGrid yourself with regard to this. Configure SendGrid: Register on the signup.sendgrid.com page. Create an SMTP Relay by using the next page. Copy the created API key and keep it on your PC. You need it for the configurations in Profit. Leave the SendGrid page open. Configure Profit: Open the environment. Go to: General / Environment / Management / Properties . Go to the tab E-mail . Select SMTP in the Mail server type field. Server for outgoing mail : smtp.sendgrid.net Port for outgoing mail: 465 Select Enforce secure communication and SMTP server requires verification . Username : apikey Password: the previously copied API key. Go to the SendGrid page and click Verify integration . Go to Profit and send an email with the Test button. The recipients of email that you send through SendGrid will see ‘via sendgrid.net’ in the received email. If you do not want this, apply ‘domain authentication’ in the configuration within your DNS and SendGrid . The message will disappear from emails that are subsequently sent. This will have a positive impact on your reputation as a sending party. Exchange Online via Azure AD Connect You can send outgoing email from Profit by using Exchange Online through Azure AD Connect. You can also import e-invoices by using Azure AD Connect; see the separate description . The configuration consists of the following steps: Create application in Azure AD Configure Profit Check senders/user in Azure AD Step 1: Create application in Azure AD You create an application in Azure AD that has the correct rights. Go to https://portal.azure.com and sign on as the administrator. Click Azure Active Directory . Click App registrations . Click New registration . Give the new registration a logical name such as Profit email . Click Register . Click API permissions . Click Add a permission . Click Microsoft Graph . Click Application permissions . Select Mail.ReadWrite and Mail.Send permissions . Click Add permissions .To send using Profit emails, at least the Mail.ReadWrite and Mail.Send permissions must have been allocated to the registration. The other permissions may, if required, be deleted Click Grant admin consent for …. Click Certificates & secrets . Click New client secret . Give the new secret a logical name and specify how long the secret will apply. Click Add . You will now see the secret in the view. Save it in, for example, a password safe. Once you exit this screen, you will no longer be able to see the secret. If you cannot remember the secret anymore, a new one must be created. You will need it later on when configuring Profit in the Application secret field. Click Overview You will see the Application (client) ID and Directory (tenant) ID values. You will need it later when configuring Profit for the Application ID and Directory ID fields. Step 2: Configure Profit Open the environment. Go to: General / Environment / Management / Properties . Go to the tab E-mail . Select Exchange Azure AD at Mail server type . Enter the Directory ID , Application ID and Application secret values (based on the configuration of the Azure AD App in step 1). Enter an email address that is known in Azure AD in the Sender automatic email field (see also step 3) Step 3: Check senders/user in Azure AD In Profit, emails can be sent at different times by different senders. Emailing via Exchange Azure AD will only be successful if the used sender is a user in Azure AD. To create an Azure AD user, go to Users in the Azure AD administrator's environment (step 1) and select New user . Help Email Report an employee's start of employment in InSite You can add employees and report the start of their employment in InSite. The reporting of the employment of an employee often takes a lot of time because you need to record many things and you often need to look up the data applying to the contract. If you use profiles this is a thing of the past. The profile contains the field values that you have specified and the settings for these fields such as whether a field should be displayed or not. This means you only need to fill in the missing data and thus reporting the employment of somebody takes much less time. The site manager can add the Google route plug-in to this page which provides you with a simple way of calculating the home-to-work distance. Reporting the start of an employee's employment starts with the selection of a profile. This causes various data to be entered automatically. Only complete any missing data. Example: The employer employs full-time employees, part-time employees for 90% and casual staff. To report the start of employment for these employees, you use profiles. The profile for a full-time employee contains a 100% timetable. The profile for part-time employees does not contain a default timetable. You must select the correct timetable yourself. The profile of casual staff contains a zero-hour timetable by default. You cannot change this. To report an employee's start of employment: Open InSite.InSite may have been configured differently for you, in which case the description of the action deviates. Click on: the profile. Enter the name and address data of the employee.Mandatory fields are indicated with a *. Enter the communication data. Enter the personal details.The social security number ('BSN') is mandatory. In InSite, a check is performed on the name, the date of birth and the BSN. This prevents you from recording an employee twice. This means that you cannot record the following employees in InSite: anonymous employees, employees who have reached the 'AOW' age and continue to work, trainees who become fixed salary employees, employees with the white and green table. Enter the bank details. Click on: Next . Enter the contract data:Enter the Contract start date . Complete the remaining fields. Choosing the correct CLA/term of employment and employer is very important here.The Reason employed is used in the 'GMA' file for 'PGGM'. Note: Profit only processes the wages of employees of the types Member of staff , Entrepeneur - with salary , and Placement - with salary . As a consequence, these employees are automatically included in the Wage declaration. In this case you have the following options: Member of staff Temporary Borrowed from another company/branch Employer - with salary Employer - without salary Placement - with salary Trainee - without salary Interim employee Expat Subsequent payment at employment end Not included in Payroll The types Trainee without salary, Interim employee, Borrowed from another company/branch, Employer without salary and Temporary are not included in the Payroll wage processing. The other types are. Expand and/or change The selection of employee types cannot be expanded or changed. We supply the table containing the employee types as a default and Profit functionality is linked to it. We maintain the table based on legislation. Enter the start date of the contract chain for the Wet Werk en Zekerheid in Contract chain start date .In the case of a fixed-term contract Profit copies the start date of the contract. View the Help about the Wet Werk en Zekerheid for more information on recording a contract chain. Select the chain number, if applicable.In the case of a fixed-term contract the field is mandatory. Select the Organisational unit and the Job of the employee.You can only choose jobs that are available at the employer. If you select a position, Profit automatically copies the associated job and organisational unit. Profit also copies the cost centre and cost unit, if cost centres and units are used. Record the timetable. You have the following options:Select the default timetable (from the CLA/term of employment). If an employee does not have fixed working hours, select the Variable work pattern check box. Enter the number of hours and days per week. If possible, also select the check boxes for the working days. In the case of a zero hours contract you enter 0 hours and 0 days. In case of a work timetable, select the Variable work pattern and Variable pattern in work timetable check boxes. Always enter the number of hours per week. Next select the required timetable cycle and the required start week. Under the Education activation, you specify the weekly timetable based on a number of FTEs. To record a weekly timetable based on the number of FTEs, link the education CLA to the profile for reporting the start of employment. Select the Salary type ; this determines which fields you need to complete for this step. If you previously selected Hourly wage or Fixed salary , specify a value for the Salary field. For a salary scale, you perform the following steps:Specify the Wage scale type and Wage scale . You can only select data that corresponds with the selected Period table . Furthermore, the CLA type of the wage scale must match the CLA type of the employee's CLA. Select the step in the wage scale. The step depends on the age the relevant employee has reached on the start date of this salary line (that is, not the age reached on the current date). If, because of his age, the employee still falls in an age step, then only this step is displayed. If an employee falls outside the age steps, the service year steps appear. If you cannot select the step, make sure that the steps have been added to the selected wage scale. Also check the validity period of the wage scale. If required, set an allowance. If you want to record a percentage, select the Allowance % check box. If not, record an amount. In the case of full-time and part-time workers, select Scale salary or Fixed salary . For other employment types select Scale hourly wage or Hourly wage . For a fixed salary, Profit automatically calculates the 'BT' annual wage for the taxation of wage components at a special rate in Profit Payroll. Click on: Next . Enter the agency details.You cannot select the agencies that are not available at the employer level. You first need to add the agencies to the employer. Agencies that are relevant for all employees, such as the tax authority, are automatically included by Profit. You cannot undo this selection. If an agency has an end date at the employer level, then after the end date you cannot select this agency at the employee level any more. However, if you still want to add the agency, you can specify the required code manually. If applicable, you can enter a pension number. You do not enter a pension number for the pension data delivery of 'APG' and 'PGGM'. For the ‘APG’ and ‘PGGM’ pension agencies, Profit automatically determines the pension number in the External identification number field in the Employment tab in the properties of the contract. Click on: Add .If you have not yet configured any users for reviewing, you cannot complete the addition of the new employee. In this case, Profit does already create the employee. After the addition of a user for reviewing, you report the employee as re-employed . See also Agencies Profiles Help Employee Dossier item type In dossiers and workflows, you can use the dossier item types supplied as defaults or types that you add yourself. Profit comes with a large number of default dossier item types which you can configure yourself. You can add an unlimited number of dossier item types. You can add up to 40 types of dossier items in which custom fields are used. Description Profit comes with a large number of default dossier item types which you can configure yourself. You can add an unlimited number of dossier item types. You can add up to 40 types of dossier items in which custom fields are used. Procedure Add a dossier item type The dossier items you save to the dossiers are classified by type. The dossier item type forms the basis for the configuration of the workflow. You can add dossier item types yourself. Set destinations for a dossier item type The destination of a dossier item determines the dossier in which you can view the item. You can select multiple destinations. For example, if you select Employee and Course as destinations, you can open the submitted dossier item from the employee and course dossier. Change a dossier item type After you have added a dossier item type, you can still change its properties. Block a dossier item type You can block a dossier item type. A blocked dossier item type can no longer be submitted in Profit Windows, InSite and/or OutSite. Custom fields for a dossier item type You can extend dossier item types with custom fields, so that you can add company-specific data to the dossier items. These custom fields are placed on tabs you can also add yourself. Also see Make a dossier item type visible in InSite and OutSite Features for a dossier item type Authorise dossier items Configure the absence dossier Help Dossiers Configure declarations An employee wants to be able to declare expenses incurred. Examples of such expenses are (business) kilometres, lunch costs, hotel costs, parking costs, etc. The employees can use InSite to declare their expenses. If you have Profit Projecten, these entries can also be recorded via the actual costing. Profit can automatically pay out the entered expenses with the salary. Description The process for the configuration of the declarations is as follows: Integration with Profit Projects If you work with Profit Projecten and use validity combinations, the validity combinations will also apply in the Declaration process. For this functionality the validity combinations and cost types must have been configured. Procedure Link the projects period table Configure cost types Configure approval Configure an employer Workflows Profile Configure the Declarations functionality for InSite Also see Declarations Help Declarations Configure Applicant Self Service For Applicant Self Service, you configure both InSite and OutSite. Next you perform the supplementary steps for, for instance, the workflows. Content Video Description Procedure Video Description For recruitment and selection in InSite and OutSite via Applicant Self Service, you configure InSite, OutSite and the application portal. You can also configure Applicant Self Service for InSite only. You then use the workflows but only for your own employees. By default, the responses are not visible to your own employees in that case. Next, you add the document template and the correct message templates. Next, you adjust the Application and the Sollicitant indienst workflows if required. Finally, you set a custom configuration for employees and applications if you want to use a custom configuration. You can also use profiles for applications. For instance, a vacancy for a truck driver requires other fields than a vacancy for a Profit teacher. Procedure Configure sites with templates for Applicant Self Service Add a vacancy document template Add message templates for Applicant Self Service Application workflows Custom configuration for Applicant Self Service Add a profile for an application Use Applicant Self Service Help Applicant Self Service Configure leave This topic contains an overview of all the settings and master data concerning leave. Description In Profit you can use different leave types, such as holidays, WTR and unpaid leave. You first need to configure these leave types in the CLA/term of employment. Other settings may apply per leave type with respect to determining the leave entitlement, the integration with Profit Projecten, etc. The leave types and associated settings in a CLA/term of employment apply to all the linked employees. Per employee/leave type/leave period Profit determines the periodical entitlement and the leave balance based on the leave entries and corrections. Leave arrangements If you distinguish different groups of employees with different arrangements, you can configure this in the following ways: Settings per employmentThe CLA/term of employment contains all possible employments (full-time, part-time, casual staff, etc.). You determine per employment whether this results in an entitlement to holiday and/or 'ATV'. Example: You have created the leave types 'Holiday', 'ATV', and 'Special leave'. These apply to all employees with full-time or part-time employment. Casual staff does not have a right to 'ATV'. You specify this in the employment type On-call staff in the CLA/term of employment. This means you cannot make any WTR entries for casual staff and Profit does not maintain a balance. Settings per term of employmentIn the case of greater differences you can use different terms of employment. Concepts Basic leave entitlementThe basic leave entitlement of a leave type is the leave entitlement in hours per leave period in case of a full-time employment. The leave period is determined by the CLA/term of employment of the employee. Periodical entitlementThe number of hours of leave per leave type that an employee is actually entitled to. Profit determines the periodic entitlement per employee/leave period/ leave type. Leave balanceSum of the periodical entitlement, extra leave entitlement, leave entries and leave correction entries. Periodical entitlement that has been 'rolled over' from the previous period also is part of the periodical entitlement of the current period. Basic leave entitlement A term of employment contains one leave period table and the leave types: Leave period table The leave period table contains the periods during which you want to track the leave, for example calendar years. A broken year or another period (per quarter or month) is also possible. Leave typesEach leave type has its own basic leave entitlement: the right to leave in hours per leave period in case of full-time employment. Example: The leave period is one calendar year. You have added the years 2012-2016 to the leave period table. This means that with leave types such as 'Holiday' and 'ATV' you record the leave entitlement annually. The entitlement to extra leave (based on age, years of service or job) you also record annually. In the period 2012 - 2016, Profit maintains a leave balance line per employee/year/leave type. If you want to start entering leave in 2017, you must first add this year to the leave period table. Periodical entitlement per employee Per employee, Profit determines the periodical entitlement per leave type. This is the leave entitlement in hours that the employee can actually take. There are (per leave type) two ways to calculate the periodical entitlement: Leave entitlement based on Profit HRProfit determines the leave entitlement based on the number of workable hours per year. Leave entitlement based on actual costing (Profit Projecten integration)Profit determines the leave entitlement based on the number of hours entered in the actual costing that provide an entitlement to leave. The above calculation methods do not apply to time off in lieu and 'ATV' accrual based on a work timetable. Custom fields of the 'Leave balance' table The leave balance table includes the Current balance and Current balance (hours/minutes) fields. These custom fields allow you to deviate from the leave balance determination used by Profit. Contact your consultant if you want to use this option. Procedure Enter in hours:minutes or hundredths Configure custom tables for leave Configure the days closed/public holidays table Record HR settings for leave Add a leave period table Configure the statutory and non-statutory leave Configure a leave type Configure leave types WTR on the basis of a work timetable Extra leave Pay out or deduct leave Configure public holiday leave Journalise the leave entitlement value Settings per employer Configure leave and occupancy in InSite Also see Leave requests via InSite Configure leave integration with Projects Configure time off in lieu Help Leave Authorisation in InSite You use the authorisation to determine which users have access to an InSite website. For every user who has access, you use roles to determine which web pages can be accessed. You make sure users have access to all pages they need to perform their tasks, but nothing more than that. Video Description Authorisation is the same as assigning rights. In this case you are authorising the employees to use InSite. You configure InSite on the basis of roles (jobs/responsibilities) that exist in the organisation. You also combine separate pages and actions into logical pieces of functionality. You collect the functionality a person needs to fill a certain role into an authorisation role. After you have added authorisation roles, you authorise someone simply by assigning them the correct authorisation role. If a new employee joins the organisation, add this person as a user. You then link this user to the correct group so that he or she is authorised for the correct functionality. You cannot authorise actions separately. Note: A user in Profit must be linked to an employee who is known in Profit HR. This employee must have a valid contract on the current date. If the employee does not have a valid contract, a message appears stating that the user is not authorised for the page in InSite. In a diagram, this looks as follows: Employee Self Service (ESS) As an employee you can go to InSite to use Employee Self Service (ESS) to view your own data and enter any necessary changes. These modifications may pass through a workflow to check and approve any modifications before they are definitively implemented. Suppose you move, then an example of ESS is that you record your new address yourself through InSite. Another example of ESS is to request your holiday by submitting a leave request through InSite. The basic concept behind ESS is that information should be accessible for everybody and easily retrievable using InSite. For example, consider making your company documents centrally available, requiring the employees to approve the new version (employee's manual, car lease contract, competition clause). Other documents, such as project reports and minutes of meetings, can easily be published in this manner and are always retrievable with a search function. It is also very easy to present a leave card, make a piece of information known, announce a company outing or congratulate an employee of the month. In short, no stacks of paper and no overloading of your mailbox. Management Self Service (MSS) Using Management Self Service (MSS), managers (depending on authorisation) can process activities and actions. For example, it is easy for the manager to approve a leave request. But also other requests from employees such as study requests, expense claims, etc. can be processed by the manager. As a result the administrative load for HR Managers is greatly reduced, leaving more time for important issues. Managers not only process requests from employees, insight is also important! MSS provides the management with: Insight into, for example, sickness overviews, occupancy overviews and other reports (that you have prepared yourself). Alerts, such as: expiry of a contract, sickness and leave entries, birthdays, anniversaries and performance interviews. User count regarding the Profit licence In the licence , we distinguish between users who have access to Profit Windows and users who only have access to InSite. In InSite we distinguish users that have access to Profit Windows and users that only have access via the web. This last group of users we call ESS/MSS users. In the properties of the environment, you can check the numbers included in the licence on the Licence information tab. Procedure Authorise an authorisation role and functionality Authorisation roles Assign an authorisation role to a user Assign authorisation roles to user groups View users per authorisation role Functionality Authorisation of tabs Windows authentication Authorise a site manager Help Authorisation « ‹ 1 2 3 4 5 6 7 › » feedback