Integrations & API
Kibi Connect in your IT landscape
Single sign-on with Microsoft Entra ID, an open REST API with webhooks, your own web apps embedded right in the navigation, iCal calendar, DATEV export. Kibi Connect connects to what you already run — so non-desk workers (more than 40 % of staff) are properly part of the system, too.
Single sign-on
Microsoft Entra ID (Azure AD) with OIDC login and user sync via the Microsoft Graph API.
REST API & webhooks
Open API with token auth, granular scopes and signed webhooks — fully documented via OpenAPI.
Embed web apps
Bring machine portals, booking systems or internal tools right into the Kibi navigation.
DATEV export
Time-tracking data as DATEV payroll CSV — ready for your tax advisor.
Single sign-on
Microsoft Entra ID (Azure AD) — login and user sync
Employees sign in to Kibi Connect with their Microsoft account. In the background a sync process keeps profiles, departments and profile photos up to date via the Microsoft Graph API. Auto-provisioning creates new employees automatically once they appear in Entra ID — no double maintenance.
- OIDC login with standard scopes (openid, profile, email, User.Read)
- User sync via Microsoft Graph API: name, job title, department, optional profile photo
- Filters: assigned users only, department whitelist, scheduled automatic sync
- Configured in the central admin area
REST API
An open API for your own workflows and tool integrations
An open REST API with token authentication and granular scopes — fully documented via OpenAPI. Use it to connect Kibi with your own tools, internal services and common workflow platforms.
- Token auth with granular scopes per resource
- Rate limits: 120 read requests/min, 30 write requests/min per token
- OpenAPI spec for code generation in any language
- Live documentation at kibi.de/docs/api
Webhooks
Push events straight into your systems
Whenever something happens in Kibi — a new employee, a new calendar event, a completed task — Kibi pushes the event signed to your URL. Build reactions, reports or automations without having to poll constantly.
- HMAC-SHA256 signature in the X-Kibi-Signature header against tampering
- Around 20 events: user, post, calendar, task, group and wiki lifecycle
- Retry logic and delivery log for every dispatch
- Persistent failures auto-disable the endpoint
Embed web apps
Bring existing tools straight into the Kibi navigation
Machine portals, booking systems or internal pages can be added as an extra entry in the Kibi navigation — no media break, no separate bookmark. The app opens full-page inside Kibi, with a security whitelist for allowed sources.
- Any URL as a navigation entry with its own label and icon
- CSP whitelist for allowed iframe sources — no wild embedding
- Configured in the admin area
- Works with anything that can be embedded in an iframe
Calendar
iCal feed for Outlook, Apple Calendar and Google Calendar
Employees create a private calendar token and subscribe to Kibi events in their preferred calendar client. Updates in Kibi appear automatically in the Outlook entry — no double maintenance, no missed updates.
- Standard .ics format
- Per-employee feed token, revocable at any time
- Works with every calendar client that supports iCal subscriptions
Payroll accounting
DATEV payroll export for your time tracking
Time-tracking data from Kibi Connect can be exported monthly as DATEV-compliant CSV — actual hours, overtime, vacation and sick days, Sunday and night hours. Imports directly into the payroll software used by your tax advisor.
- DATEV payroll CSV (semicolon-separated): consultant number, client number, period, personnel number, wage type, value
- Captures actual/target hours, overtime, vacation/sick days, Sunday and night hours
- Requires personnel numbers in employee profiles and a locked monthly close
Datenhoheit
Your data stays yours — at any time.
Kibi Connect is an open platform — what goes in comes out again. Use the REST API to export all your content whenever you want. At the end of a contract your data is deleted in line with the GDPR.
- Full data export via the REST API — whenever you want
- Hosted in Germany/EU (Hetzner), GDPR-compliant
- No third-party sharing, no US cloud
- End of contract: your data is deleted in line with the GDPR
Available on request
We enable these integrations on request — reach out and we'll openly discuss prerequisites and effort with you.
- Google Workspace SSO
- Generic SAML / OIDC (other identity providers)
- SCIM provisioning
- LDAP / Active Directory on-prem
- MCP server for Claude, ChatGPT & co.
- Zapier / n8n / Make.com
- Slack / Microsoft Teams bridge
- CalDAV server with write access
- DATEV accounting live API
Frequently asked questions about integrations
Does Kibi Connect support Microsoft Entra ID (Azure AD)?
Yes. Employees sign in via OIDC with their Microsoft account. A sync process keeps profiles, departments and profile photos up to date via the Microsoft Graph API. Auto-provisioning creates new employees automatically. Configured in the central admin area.
Is there a public REST API?
Yes. An open REST API with token authentication, granular scopes and signed webhooks. Fully documented via OpenAPI — find the documentation at kibi.de/docs/api.
How do webhooks work?
Webhook endpoints are configured in the admin area. Kibi delivers events HMAC-SHA256-signed (header X-Kibi-Signature) to your URL — with retry and delivery log. After persistent failures Kibi disables the endpoint automatically.
Can I embed my own web apps in Kibi?
Yes. Arbitrary URLs can be added as a navigation entry in Kibi and open full-page in an iframe — for example machine portals, booking systems or internal pages. Allowed sources are protected by a whitelist.
Does Kibi Connect support SCIM, generic SAML or Google Workspace SSO?
Available on request. SSO and user sync run out of the box via Microsoft Entra ID — other identity providers, SCIM provisioning and Google Workspace can be enabled for you. Reach out.
How do I subscribe to the Kibi calendar in Outlook?
Generate an iCal feed token in your personal settings and subscribe to the generated .ics URL in Outlook (File → Account Settings → Internet Calendars). Works the same way for Apple Calendar and Google Calendar.
Can I push time-tracking data to DATEV?
Yes, monthly as DATEV payroll CSV. Includes actual/target hours, overtime, vacation and sick days, Sunday and night hours. Importable into the payroll software used by your tax advisor. A live API to DATEV is available on request.
Is there a connector for Zapier, n8n or Make.com?
Available on request. You can also build your own workflows on top of our REST API and webhooks — we're happy to support you with the first steps.
Where is my data stored?
On Hetzner servers in Germany, GDPR-compliant. No US cloud, no data sharing with third parties.
Need an integration not listed here?
We help connect Kibi to your existing IT — directly or via our API. Reach out and we'll openly discuss feasibility and effort with you.
Your contacts at Kibi
Christofer, Maria, Verena
Christofer, Maria and Verena advise you personally, run demos and webinars, and guide you through the rollout in your company.