BambooHR Integration

The HR data from Bamboo plays a crucial role in managing identities and ensuring the security of these identities within your organization.

With the BambooHR integration, Rezonate can correlate HRIS information to the identities in your Identity Provider, identifying security policy breaches (Such as active access for terminated employees, and enriching identity-centric context).

In this Integration Rezonate has limited read-only access to a subset of the employee's attributes, without access to sensitive HR information such as salaries or contracts.

Integration Steps

Creating the Access Level (Role)

1. Sign in to your Bamboo Console, with a privileged user and click on the settings button.

   
2. Select "Access Levels" in the menu.

   
3. Select "Create a Custom Access Level"

   
4. In the Access Level Name - write "Integration Access", you can leave the description empty.

   
5. In the next step (What this Access Level can do), keep it empty and click Next.

   
6. Under the "What this Access Level Can See" select the following: Personal

   1. Basic Info - View Only

   2. Address - View Only

   3. Contact - View Only

   4. Social Links - View Only

   5. Education - View Only

   Job:

   1. Hire Date - View Only

   2. Original Hire Date - View Only

   3. Employment Status - View Only

   4. Job Information - View Only

Its highly recommended to exclude SSN from the list of fields, and can be easily done by expanding the Basic Info, clicking on SSN, and changing to "No Access"

After setting the access level, click on the Save & Finish button at the bottom of the screen ____

Creating a Service-Account User

After we have defined the limited Role, we will need to create a user to be used as a service account. To do that, click on the recently-created access level, and click on the settings button. Select "Add a Non-Employee BambooHR User.

If necessary, you can create an email alias for the integration, as you will need to confirm the selected email. in the username, info write the following: First Name: Rezonate, Last Name: Integration.

After creating the user, you'll have to confirm the email and set a password.

After setting a password, sign in to the Integration user account and select the profile button. Then Click on API Keys.

Generate an API Key and copy it.

Now, Browse into Rezonate and go to the integration section, under the settings. Click "Add Integration" and select BambooHR.

Field	Value
API Key	Place your recently created-api key
Company Domain	The company domain used to access your account (If you access BambooHR at https://mycompany.bamboohr.com, then the company domain is “mycompany”)

Thats It! you have finished the process. 🪃

The Data is being collected by Rezonate

As mentioned, Rezonate has limited access to Employee reports, without sensitive salary information or contracts. below is the list of the actual fields in the report that is collected

export const customFormat = {
	title: 'Rezonate Report',
	fields: [
		'id',
		'acaStatus',
		'acaStatusCategory',
		'address1',
		'address2',
		'age',
		'bestEmail',
		'birthday',
		'city',
		'country',
		'createdByUserId',
		'dateOfBirth',
		'department',
		'division',
		'employeeNumber',
		'employmentHistoryStatus',
		'firstName',
		'fullName1',
		'fullName2',
		'fullName3',
		'fullName4',
		'fullName5',
		'displayName',
		'gender',
		'hireDate',
		'originalHireDate',
		'homeEmail',
		'homePhone',
		'flsaCode',
		'jobTitle',
		'lastChanged',
		'lastName',
		'location',
		'maritalStatus',
		'middleName',
		'mobilePhone',
		'preferredName',
		'state',
		'stateCode',
		'status',
		'supervisor',
		'supervisorId',
		'supervisorEId',
		'supervisorEmail',
		'terminationDate',
		'workEmail',
		'workPhone',
		'workPhonePlusExtension',
		'workPhoneExtension',
		'zipcode',
	],
};