# BambooHR Integration The following guide helps you integrate and configure Bamboo HR with Sprinto for people and user access management. Based on your use case, you can follow the applicable procedure. ### How does this integration help The integration helps sprinto in the following ways: * People management: The integration simplifies the retrieval of essential staff details, including names, email addresses, job roles, onboarding dates, and reporting managers from BambooHR. This ensures Sprinto maintains current staff information and meets compliance requirements efficiently. * Access management: The integration enhances user access control by validating user accounts from BambooHR against defined access criteria. Sprinto identifies and flags any unauthorized or invalid access, triggering checks to revoke inappropriate permissions and maintain system security. #### Sprinto checks for BambooHR Below are the Sprinto checks for the following integration types: * People management: Sprinto checks for people management
Sprinto checkCheck descriptionReference procedure
Staff role should be assignedAll in-scope staff members must have an assigned staff role.How to fix
Reporting manager should be assigned

All in-scope staff members should have an assigned reporting manager.

Note: Top management roles like CEO, CTO, etc. are exceptions.

How to fix
Date of joining for new staff should be providedDefine the joining date for all newly onboarded staff members.

How to fix


* User access monitoring: Sprinto checks for users' access monitoring | Sprinto check | Reference procedure | | ----------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | BambooHR access should be removed for offboarded user | [How to fix](https://docs.sprinto.com/data-library/access/dashboard-actions/view-and-map-staff-access) | | User should be identified | | | User access to critical system should be valid |

How to fix

Note: The user access to the critical system becomes valid if the respective Org role is added to the system.

| ### Before you begin * Log in on Sprinto as administrator. * Ensure you have Full Admin access to the BambooHR account. To verify, go to Settings > Access Levels > Full Admin on your BambooHR account. ### Create an API Key Service Account 1. Sign in to **BambooHR**. 2. Click on the **People** ribbon, and click **New Employee**.
3. Enter a unique **Employee Number** (i.e. API001), **First Name** (i.e. OrgChart), and **Last Name** (i.e. API) in the corresponding text boxes (under the "**Personal**" header). 4. Enter a valid email address in the **Work Email** textbox (under the "**Contact**" header), and then click **Save**. 5. Search for the new Employee's name in the search bar, and then click on their name.
6. Click on the Settings icon in the top-right corner. 7. Click on **Access Levels** (in the **Settings** panel). 8. Click on the **+** icon, and then select the **Custom Access Level** option from the dropdown menu.
9. Name the custom Access Level (i.e. Sprinto Integration), add a description (if desired), and the click **Next Step**. 10. Click **Next Step** again. 11. Click on the **Basic Info** arrow (under the **Personal** heading). 12. Head over the field you would like OrgChart to access and then click on the Eye icon to set the Access Level to "View Only." Enable **View Only Access** for the following permissions**.** 13. Select **"ALL EMPLOYEES"** for whom this access level can access the information**.**
9. Under the Personal section, enable View access for the following: * Basic Information: * Employee Number * First Name * Last Name
* Contact * Work Email
* Under the Job section, enable View access for the following: * Hire Date * Original Hire Date * Direct Reports * Team
* Employment Status * Employment Status Date * Employment Status * Termination Type
* Job Information * Job Title * Department
14. Click on the **Save & Finish** button. 15. Click on the **Add Employee** button. 16. Search and select the name of the **API Service User** associated with your account.
17. Click **Done**. ### Edit the Access Level for your Information 1. Select the "**See About Themselves**" option 2. Choose "**Yes, Allow Access**" for the "Should Employees be able to see their own information?" question 3. Choose "**Full Access**" for "Which Access Level should apply?" * This means that the BambooHR Employee with this custom access level can see the same information for themselves.
### Integrate Sprinto with BambooHr Follow the below applicable procedure: #### People management: 1. Get the API key from your BambooHR account. * Log in to[ your BambooHR account](https://app.bamboohr.com/login/) using your credentials. * Click on your profile icon from the top right corner, and click API Keys.
* On the My API Keys page, click Add New Key to generate a new API key.
* Enter a name for the API Key, and click Generate Key.
* Copy the generated API Key and save it securely. We will need this API key on Sprinto to build the integration. 2. Integrate BambooHR with Sprinto. * Go to **Settings** > **Integrations** > **Available**, and click **Connect** next to BambooHR.
* Read the on-screen instructions and click Next.
* Select the acknowledgment checkbox, and click Connect to BambooHR. Note: Ensure you have enabled the pop-up window settings on your browser.
* Select the Use my API Key as access token option for authentication and click Next.
* Click Continue to proceed with the integration process. * Enter your BambooHR account subdomain, and click Submit.
* Enter the API Key copied from Step 1, and click Submit. 3. Configure BambooHR as a staff information provider. * Go to Data Library > People > Configuration, and click Manage. * On Staff information provider page, click Add Staff.
* On the Add staff member page, select Add staff from HRMS, then click the details button next to BambooHR. * On Add BambooHR as a Provider page, click Add BambooHR.\ Note: You should see “Connected” highlighted next to BambooHR. This means the BambooHR account is connected and ready to Sync information. #### Access management: Note: [Truto](https://www.truto.one/) is our integration partner for BambooHR for user access monitoring. Sprinto utilizes Truto's API capabilities for data inflow. 1. Get the API key from the BambooHR account. * Log in to[ your BambooHR account](https://app.bamboohr.com/login/) using your credentials. * Click on your profile icon from the top right corner, and click API Keys.
* On the My API Keys page, click Add New Key to generate a new API key.
* Enter a name for the API Key, and click Generate Key.
* Copy the generated API Key and save it securely. We will need this API key on Sprinto to build the integration. 2. Integrating BambooHR with Sprinto. * From the Sprinto admin portal, navigate to Data Library> Settings > Integration, then select the Available tab. * Click Connect next to BambooHR. * Click Connect next to BambooHR for Access Review.
* Read the on-screen instructions, then click Next.
* Select the acknowledgment checkbox, then click Connect to BambooHR.\ Note: Ensure you’ve a pop-up window enabled on your browser.
* In the respective fields, enter the API key and the subdomain of your BambooHR account you copied from Step 1, then click Connect.
3. Configure Bamboohr for access monitoring. * From the Sprinto admin portal, navigate to Data Library > Access, then select the Overview tab and click + Add Critical System. * Select BambooHR from the critical system library, then click Add Systems. \ **Note**: If integration is built successfully from the previous section, “Connected” will be highlighted next to BambooHR.
* From the [Access Overview](https://app.sprinto.com/app/admin/accessControl/overview) page, select BambooHR from the critical systems list. * Click Configure or Manage from the Summary tab.
* Click Configure or Edit next to Access monitoring.
* Define the valid user access type for BambooHR.
Please contact [Sprinto Support](mailto:www.support@sprinto.com) if you have any queries related to the integration or need assistance.