The tap in/out mobile requests go through an authorisation workflow if authorisation rules are set up for timesheets.
The clock in / out features that bypass the authorisation flows are:
Tap-in Tap-out web solution (PeopleHR: Use Tap-in Tap-out on web).