Connecting BambooHR via OAuth 2

July 28, 2026

BambooHR OAuth Setup Guide

Overview

First, register an application in the BambooHR Developer Portal to obtain OAuth credentials.

Next, configure those credentials in Unified.

After the setup is complete, your end users can authorize their own BambooHR accounts through your embedded Unified connection flow.

Part A — Set Up Your App in the BambooHR Developer Portal

One-time setup

1. Open the BambooHR Developer Portal

Go to:

https://developers.bamboohr.com/home/applications

Sign in to your BambooHR Developer Portal account.

2. Create a New Application

1. Click Add application in the top-right corner.
2. Enter an Application Name, for example: unified
3. Click Create Application.

3. Collect Your Application Details

After creating the application, note the following values:

• Application Key
• Application ID

You will need the Application Key when configuring the integration in Unified.

4. Copy Your OAuth Credentials

Under App Credentials, copy the following:

• Client ID
• Client Secret

Use the eye icon to reveal the Client Secret.

You can use Regenerate to create a new Client Secret when required.

Important: Treat the Client Secret like a password. If you regenerate it, you must also update the Client Secret in Unified.

5. Add the Redirect URI

Under Redirect URIs, add the OAuth callback URL provided by Unified.

6. Select the Required Scopes

Go to:

Application Scopes → Select Scopes

For each available category, such as Employee, Company, Hiring, Time Off, and Reports, choose the appropriate permission level:

• No Access
• Read
• Read / Write

Configure the following scopes as required by your implementation:

email
openid
company:info
company_file
company_file.write
employee
employee.write
employee:assets
employee:assets.write
employee:compensation
employee:compensation.write
employee:contact
employee:contact.write
employee:custom_fields
employee:custom_fields.write
employee:custom_fields_encrypted
employee:custom_fields_encrypted.write
employee:demographic
employee:demographic.write
employee:dependent
employee:dependent.write
employee:dependent:ssn
employee:dependent:ssn.write
employee:education
employee:education.write
employee:emergency_contacts
employee:emergency_contacts.write
employee:file
employee:file.write
employee:identification
employee:identification.write
employee:job
employee:job.write
employee:management
employee:management.write
employee:name
employee:name.write
employee:payroll
employee:payroll.write
employee:photo
employee:photo.write
employee:providers
employee:providers.write
employee:providers:payroll
employee:providers:payroll.write
employee:vaccination
employee:vaccination.write
employee_verifications
employee_verifications.write
goal
goal.write
onboarding
onboarding.write
performance:assessments
performance:assessments.write
performance:feedback
performance:feedback.write
performance:one_on_ones
performance:one_on_ones.write
sensitive_employee:address
sensitive_employee:address.write
sensitive_employee:creditcards
sensitive_employee:creditcards.write
sensitive_employee:protected_info
sensitive_employee:protected_info.write
tasks
tasks.write
hiring:applications
hiring:applications.write
hiring:job_openings
hiring:job_openings.write
offline_access
user
user.write
report
report.write
time_off
time_off.write
time_off:requests
time_off:requests.write

Part B — Configure BambooHR in Unified

7. Configure the BambooHR Integration

In the Unified dashboard, go to:

Integrations → BambooHR → Authorization

Configure the following fields:

• Set the authorization method to OAuth 2
• Paste the OAuth 2 Client ID from Step 4
• Paste the OAuth 2 Client Secret from Step 4
• Enter the Developer API Key
  • Use the Application Key collected in Step 3

Click Update to save the configuration.

8. Configure the Embedded Component

In the Unified dashboard, go to:

Embedded components

Configure the following settings:

• Success URL
• Failure URL
• Data region, such as:
  • US
  • EU
  • AU
• Permission Scopes / Categories

Copy the appropriate embed code into your application.

Unified provides embed options for:

• React
• Angular
• Vue
• Svelte
• JavaScript
• API-based implementations

Part C — End-User Authorization Flow

9. Enter the BambooHR Domain

In the embedded authorization flow, the end user sees the Authorize Access screen.

The user enters their BambooHR Domain and clicks Authorize.

10. Approve Access

BambooHR displays a consent screen similar to:

Share access with unified?

The user reviews the requested scopes and clicks Allow Access.

11. Confirm the Connection

After authorization is completed, the connection appears in Unified under:

Settings → Connections

The connection should display a Healthy status.