--- title: "Connecting BambooHR via OAuth 2" img: https://s3.us-east-2.amazonaws.com/unified-article-images/connecting_bamboohr_via_oauth_2-icon.svg date: 2026-07-28T21:01:00.000Z tag: Guides description: "First, register an application in the BambooHR Developer Portal to obtain OAuth credentials." url: "https://unified.to/blog/connecting_bamboohr_via_oauth_2" --- # Connecting BambooHR via OAuth 2 ------ _July 28, 2026_ # BambooHR OAuth Setup Guide ## Overview First, register an application in the BambooHR Developer Portal to obtain [OAuth](/embeddedauth) credentials. Next, configure those credentials in Unified. After the setup is complete, your end users can authorize their own BambooHR accounts through your embedded Unified connection flow. --- # Part A — Set Up Your App in the BambooHR Developer Portal > **One-time setup** ## 1. Open the BambooHR Developer Portal Go to: [https://developers.bamboohr.com/home/applications](https://developers.bamboohr.com/home/applications) Sign in to your BambooHR Developer Portal account. ## 2. Create a New Application ![image.png](https://s3.us-east-2.amazonaws.com/unified-article-images/connecting_bamboohr_via_oauth_2-0.png) 1. Click **Add application** in the top-right corner. 2. Enter an **Application Name**, for example: `unified` 3. Click **Create Application**. ## 3. Collect Your Application Details After creating the application, note the following values: - **Application Key** - **Application ID** You will need the **Application Key** when configuring the integration in Unified. ## 4. Copy Your OAuth Credentials Under **App Credentials**, copy the following: - **Client ID** - **Client Secret** Use the eye icon to reveal the Client Secret. ![image.png](https://s3.us-east-2.amazonaws.com/unified-article-images/connecting_bamboohr_via_oauth_2-1.png) You can use **Regenerate** to create a new Client Secret when required. > **Important:** Treat the Client Secret like a password. If you regenerate it, you must also update the Client Secret in Unified. ## 5. Add the Redirect URI Under **Redirect URIs**, add the OAuth callback URL provided by Unified. ## 6. Select the Required Scopes Go to: **Application Scopes → Select Scopes** ![image.png](https://s3.us-east-2.amazonaws.com/unified-article-images/connecting_bamboohr_via_oauth_2-2.png) For each available category, such as Employee, Company, Hiring, Time Off, and Reports, choose the appropriate permission level: - **No Access** - **Read** - **Read / Write** Configure the following scopes as required by your implementation: ```plain text email openid company:info company_file company_file.write employee employee.write employee:assets employee:assets.write employee:compensation employee:compensation.write employee:contact employee:contact.write employee:custom_fields employee:custom_fields.write employee:custom_fields_encrypted employee:custom_fields_encrypted.write employee:demographic employee:demographic.write employee:dependent employee:dependent.write employee:dependent:ssn employee:dependent:ssn.write employee:education employee:education.write employee:emergency_contacts employee:emergency_contacts.write employee:file employee:file.write employee:identification employee:identification.write employee:job employee:job.write employee:management employee:management.write employee:name employee:name.write employee:payroll employee:payroll.write employee:photo employee:photo.write employee:providers employee:providers.write employee:providers:payroll employee:providers:payroll.write employee:vaccination employee:vaccination.write employee_verifications employee_verifications.write goal goal.write onboarding onboarding.write performance:assessments performance:assessments.write performance:feedback performance:feedback.write performance:one_on_ones performance:one_on_ones.write sensitive_employee:address sensitive_employee:address.write sensitive_employee:creditcards sensitive_employee:creditcards.write sensitive_employee:protected_info sensitive_employee:protected_info.write tasks tasks.write hiring:applications hiring:applications.write hiring:job_openings hiring:job_openings.write offline_access user user.write report report.write time_off time_off.write time_off:requests time_off:requests.write ``` --- # Part B — Configure BambooHR in Unified ## 7. Configure the BambooHR Integration In the Unified dashboard, go to: **Integrations → BambooHR → Authorization** ![image.png](https://s3.us-east-2.amazonaws.com/unified-article-images/connecting_bamboohr_via_oauth_2-3.png) Configure the following fields: - Set the authorization method to **OAuth 2** - Paste the **OAuth 2 Client ID** from Step 4 - Paste the **OAuth 2 Client Secret** from Step 4 - Enter the **Developer API Key** - Use the **Application Key** collected in Step 3 Click **Update** to save the configuration. ![image.png](https://s3.us-east-2.amazonaws.com/unified-article-images/connecting_bamboohr_via_oauth_2-4.png) ## 8. Configure the Embedded Component In the Unified dashboard, go to: **Embedded components** ![image.png](https://s3.us-east-2.amazonaws.com/unified-article-images/connecting_bamboohr_via_oauth_2-5.png) Configure the following settings: - **Success URL** - **Failure URL** - **Data region**, such as: - US - EU - AU - **Permission Scopes / Categories** Copy the appropriate embed code into your application. Unified provides embed options for: - React - Angular - Vue - Svelte - JavaScript - API-based implementations --- # Part C — End-User Authorization Flow ## 9. Enter the BambooHR Domain In the embedded authorization flow, the end user sees the **Authorize Access** screen. The user enters their **BambooHR Domain** and clicks **Authorize**. ![image.png](https://s3.us-east-2.amazonaws.com/unified-article-images/connecting_bamboohr_via_oauth_2-6.png) ## 10. Approve Access BambooHR displays a consent screen similar to: > **Share access with unified?** The user reviews the requested scopes and clicks **Allow Access**. ![image.png](https://s3.us-east-2.amazonaws.com/unified-article-images/connecting_bamboohr_via_oauth_2-7.png) ## 11. Confirm the Connection After authorization is completed, the connection appears in Unified under: **Settings → Connections** The connection should display a **Healthy** status. ![image.png](https://s3.us-east-2.amazonaws.com/unified-article-images/connecting_bamboohr_via_oauth_2-8.png)