--- title: "Connecting BambooHR via OAuth 2" img: https://s3.us-east-2.amazonaws.com/unified-article-images/connecting_bamboohr_via_oauth_2-icon.svg date: 2026-07-28T21:01:00.000Z tag: Guides description: "First, register an application in the BambooHR Developer Portal to obtain OAuth credentials." url: "https://docs.unified.to/guides/connecting_bamboohr_via_oauth_2" --- # Connecting BambooHR via OAuth 2 ------ _July 28, 2026_ # BambooHR OAuth Setup Guide ## Overview First, register an application in the BambooHR Developer Portal to obtain OAuth credentials. Next, configure those credentials in Unified. After the setup is complete, your end users can authorize their own BambooHR accounts through your embedded Unified connection flow. --- # Part A — Set Up Your App in the BambooHR Developer Portal > **One-time setup** ## 1. Open the BambooHR Developer Portal Go to: [https://developers.bamboohr.com/home/applications](https://developers.bamboohr.com/home/applications) Sign in to your BambooHR Developer Portal account. ## 2. Create a New Application ![image.png](https://s3.us-east-2.amazonaws.com/unified-article-images/connecting_bamboohr_via_oauth_2-0.png) 1. Click **Add application** in the top-right corner. 2. Enter an **Application Name**, for example: `unified` 3. Click **Create Application**. ## 3. Collect Your Application Details After creating the application, note the following values: - **Application Key** - **Application ID** You will need the **Application Key** when configuring the integration in Unified. ## 4. Copy Your OAuth Credentials Under **App Credentials**, copy the following: - **Client ID** - **Client Secret** Use the eye icon to reveal the Client Secret. ![image.png](https://s3.us-east-2.amazonaws.com/unified-article-images/connecting_bamboohr_via_oauth_2-1.png) You can use **Regenerate** to create a new Client Secret when required. > **Important:** Treat the Client Secret like a password. If you regenerate it, you must also update the Client Secret in Unified. ## 5. Add the Redirect URI Under **Redirect URIs**, add the OAuth callback URL provided by Unified. ## 6. Select the Required Scopes Go to: **Application Scopes → Select Scopes** ![image.png](https://s3.us-east-2.amazonaws.com/unified-article-images/connecting_bamboohr_via_oauth_2-2.png) For each available category, such as Employee, Company, Hiring, Time Off, and Reports, choose the appropriate permission level: - **No Access** - **Read** - **Read / Write** Configure the following scopes as required by your implementation: ```plain text email openid company:info company_file company_file.write employee employee.write employee:assets employee:assets.write employee:compensation employee:compensation.write employee:contact employee:contact.write employee:custom_fields employee:custom_fields.write employee:custom_fields_encrypted employee:custom_fields_encrypted.write employee:demographic employee:demographic.write employee:dependent employee:dependent.write employee:dependent:ssn employee:dependent:ssn.write employee:education employee:education.write employee:emergency_contacts employee:emergency_contacts.write employee:file employee:file.write employee:identification employee:identification.write employee:job employee:job.write employee:management employee:management.write employee:name employee:name.write employee:payroll employee:payroll.write employee:photo employee:photo.write employee:providers employee:providers.write employee:providers:payroll employee:providers:payroll.write employee:vaccination employee:vaccination.write employee_verifications employee_verifications.write goal goal.write onboarding onboarding.write performance:assessments performance:assessments.write performance:feedback performance:feedback.write performance:one_on_ones performance:one_on_ones.write sensitive_employee:address sensitive_employee:address.write sensitive_employee:creditcards sensitive_employee:creditcards.write sensitive_employee:protected_info sensitive_employee:protected_info.write tasks tasks.write hiring:applications hiring:applications.write hiring:job_openings hiring:job_openings.write offline_access user user.write report report.write time_off time_off.write time_off:requests time_off:requests.write ``` --- # Part B — Configure BambooHR in Unified ## 7. Configure the BambooHR Integration In the Unified dashboard, go to: **Integrations → BambooHR → Authorization** ![image.png](https://s3.us-east-2.amazonaws.com/unified-article-images/connecting_bamboohr_via_oauth_2-3.png) Configure the following fields: - Set the authorization method to **OAuth 2** - Paste the **OAuth 2 Client ID** from Step 4 - Paste the **OAuth 2 Client Secret** from Step 4 - Enter the **Developer API Key** - Use the **Application Key** collected in Step 3 Click **Update** to save the configuration. ![image.png](https://s3.us-east-2.amazonaws.com/unified-article-images/connecting_bamboohr_via_oauth_2-4.png) ## 8. Configure the Embedded Component In the Unified dashboard, go to: **Embedded components** ![image.png](https://s3.us-east-2.amazonaws.com/unified-article-images/connecting_bamboohr_via_oauth_2-5.png) Configure the following settings: - **Success URL** - **Failure URL** - **Data region**, such as: - US - EU - AU - **Permission Scopes / Categories** Copy the appropriate embed code into your application. Unified provides embed options for: - React - Angular - Vue - Svelte - JavaScript - API-based implementations --- # Part C — End-User Authorization Flow ## 9. Enter the BambooHR Domain In the embedded authorization flow, the end user sees the **Authorize Access** screen. The user enters their **BambooHR Domain** and clicks **Authorize**. ![image.png](https://s3.us-east-2.amazonaws.com/unified-article-images/connecting_bamboohr_via_oauth_2-6.png) ## 10. Approve Access BambooHR displays a consent screen similar to: > **Share access with unified?** The user reviews the requested scopes and clicks **Allow Access**. ![image.png](https://s3.us-east-2.amazonaws.com/unified-article-images/connecting_bamboohr_via_oauth_2-7.png) ## 11. Confirm the Connection After authorization is completed, the connection appears in Unified under: **Settings → Connections** The connection should display a **Healthy** status. ![image.png](https://s3.us-east-2.amazonaws.com/unified-article-images/connecting_bamboohr_via_oauth_2-8.png)