Billing & Plans
Integrations
QuickBooks Online accounting sync and Auth0/SSO single sign-on — which plans include them, what they do, and a setup overview. Calendar sync is documented separately.
Integrations
BookYourPTO connects to outside systems for accounting and identity. This page covers QuickBooks Online and Auth0 / SSO. Both are Business and Enterprise features and are configured by an administrator.
Looking for calendar sync? Connecting Google/Outlook calendars is a Pro+ feature documented separately — see Calendar Integration.
QuickBooks Online
Sync your people, time, and expenses with QuickBooks Online so accounting doesn't have to re-key data.
| Plans | Business, Enterprise |
| Who can connect / sync | ADMINISTRATOR or EXECUTIVE |
| Connect via | Intuit OAuth (Settings → Integrations) |
What it syncs:
- Employees — two-way sync between BookYourPTO and QBO
- Time entries — pushed to QBO
- Expenses — pushed to QBO
- Mappings — vendors, customers, accounts, and department-to-class mappings
- Leave liability — leave balances surfaced for accounting
Status is visible on any plan; connecting requires Business+. You can see integration status — last sync time, success/failure counts — on any plan. Actually connecting and running syncs requires Business or Enterprise.
Downgrade stops syncing. If your org downgrades below Business (including being degraded to Free by a past-due payment), QuickBooks syncs stop until you're back on a qualifying plan.
Setup overview
- Confirm you're on Business or Enterprise and signed in as ADMINISTRATOR/EXECUTIVE.
- Go to Settings → Integrations → QuickBooks Online.
- Click connect and complete the Intuit OAuth authorization.
- Map your accounts, classes/departments, vendors, and customers.
- Choose what to sync (employees, time, expenses) and run an initial sync.
- Monitor last sync and success/failure counts from the integration status view.
Auth0 / SSO (OIDC)
Let your team sign in through your identity provider instead of a separate BookYourPTO password.
| Plans | Business, Enterprise |
| Who can configure | Administrator-level |
| Protocol | OIDC via Auth0 |
Auth0 brokers single sign-on and can sit in front of Google, Microsoft, GitHub, or SAML identity providers — so your existing login works for BookYourPTO.
Configuration options:
- Auto-create users on first SSO login, with a default role and default department.
- Allow or disallow local password login alongside SSO.
- Enforce SSO so password login is turned off entirely.
How users are matched to your org
SSO is matched to your organization by verified email domain (or by your org slug / custom domain).
Domain verification is required. You must verify the email domain before SSO will route to your org, and free email domains are excluded (you can't claim
gmail.com). Custom domains require the white-label add-on.Setup overview
- Confirm you're on Business or Enterprise with an admin-level account.
- Verify your email domain (and optionally set up a custom domain via the add-on).
- Configure your Auth0 OIDC application details in Settings → Integrations → SSO.
- Set auto-create behavior (default role + department), and decide whether to allow local password login or enforce SSO.
- Test a sign-in with a domain-matched account before enforcing.
Troubleshooting
| Symptom | Cause | Fix |
|---|---|---|
| "Feature Unavailable" (403) on QuickBooks/SSO | On a plan below Business, or degraded to Free by past-due | Upgrade or fix billing |
| QuickBooks syncs stopped | Downgraded below Business, or past-due degradation | Return to a qualifying plan / fix the card |
| Can see sync status but can't connect | Status is visible on any plan; connecting needs Business+ | Upgrade to Business or Enterprise |
| SSO doesn't route to my org | Email domain not verified, or it's a free email domain | Verify a non-free domain (or slug / custom domain) |
| Users sign in but land with the wrong role | Default role/department for auto-created users | Adjust the SSO auto-create settings |
| Custom-domain SSO match not working | Custom domains require the white-label add-on and verification | Add the add-on and verify the domain |
Related
- Plans — which plans include each integration
- Calendar Integration — Google/Outlook calendar sync (Pro+)
- Add-ons — white-label branding and custom domains (needed for custom-domain SSO)