---
title: "Integrations - FusionAuth"
url: "https://docs.unified.to/integrations/fusionauth"
description: "Build FusionAuth integrations faster with our Unified API — HR & Directory data, API key, real-time sync."
date: "2026-11-10T16:40:34.718Z"
updated: "2026-11-10T16:40:34.718Z"
---

# FusionAuth integration

> What this integration supports through the Unified.to API, by object. Live data: `GET https://api.unified.to/unified/integration?type=fusionauth` with your workspace API key (or Core MCP `list_unified_integrations` with `type: "fusionauth"`). All integrations: https://docs.unified.to/integrations.md

## Overview

- **Type:** `fusionauth`
- **Categories:** [HR & Directory](https://docs.unified.to/hris/overview.md), [Passthrough](https://docs.unified.to/passthrough/overview.md)
- **Website:** https://fusionauth.io
- **Vendor API docs:** https://fusionauth.io/docs/apis/
- **Launched:** 2026-11-10

## How end users connect

- **API key** entered by the end user: `API Key`, `FusionAuth Host`, `Tenant ID`
    - An API key from your FusionAuth instance. In the FusionAuth admin UI go to Settings → API Keys and add a key that allows the user, group and tenant endpoints (GET, POST, PATCH and DELETE on /api/user, /api/user/search, /api/group, /api/group/search, and GET on /api/tenant).
    - The host of your FusionAuth instance, e.g. auth.example.com or example.fusionauth.io (no https:// and no path).
    - Optional. The id of the tenant to use when your instance has more than one tenant and the API key is not locked to a tenant. It is sent as the X-FusionAuth-TenantId header on every request. Leave blank to use all tenants the key can reach.

## Supported objects

| Object | Methods | Webhooks |
| --- | --- | --- |
| [hris_company](#hris_company) | list, get | none |
| [hris_employee](#hris_employee) | list, get, create, update, remove | none |
| [hris_group](#hris_group) | list, get, create, update, remove | none |
| [passthrough](#passthrough) | none | none |

Values below come from the integration's support data. "Required list filters" must be sent on list calls; "Required on create" fields must be sent when creating. Webhook events are `native` (pushed by the vendor) or `virtual` (polled by Unified.to). Anything not listed is not supported; an unsupported method returns `501`.

### hris_company

- **Methods:** `list`, `get`
- **Webhooks:** none
- **List filters:** none
- **Readable fields:** `created_at`, `id`, `name`, `updated_at`
- **Writable fields:** none
- **Vendor objects:** `tenants`
- **Model:** https://docs.unified.to/hris/company/model.md

### hris_employee

- **Methods:** `list`, `get`, `create`, `update`, `remove`
- **Webhooks:** none
- **List filters:** `list_company_id`, `list_limit`, `list_offset`, `list_query`
- **Readable fields:** `company_id`, `created_at`, `date_of_birth`, `emails`, `employment_status`, `first_name`, `groups`, `has_mfa`, `id`, `image_url`, `language_locale`, `last_name`, `name`, `telephones`, `timezone`, `updated_at`
- **Writable fields:** `date_of_birth`, `first_name`, `image_url`, `language_locale`, `last_name`, `name`, `telephones`, `timezone`
- **Required on create:** `emails`
- **Vendor objects:** `users`
- **Model:** https://docs.unified.to/hris/employee/model.md

### hris_group

- **Methods:** `list`, `get`, `create`, `update`, `remove`
- **Webhooks:** none
- **List filters:** `list_company_id`, `list_limit`, `list_offset`, `list_query`
- **Readable fields:** `company_id`, `created_at`, `id`, `name`, `updated_at`
- **Writable fields:** none
- **Required on create:** `name`
- **Vendor objects:** `groups`
- **Model:** https://docs.unified.to/hris/group/model.md

### passthrough

- **Methods:** none
- **Webhooks:** none
- **Readable fields:** none
- **Writable fields:** none