--- title: "Connect Clarity Security to BambooHR" slug: "bamboo-hr" description: "Learn how to connect Clarity Security to BambooHR to automate your identity life cycle management and user access reviews." tags: ["How-To", "application", "connectors", "marketplace"] updated: 2023-05-02T21:33:58Z published: 2023-05-02T21:33:58Z canonical: "help.claritysecurity.com/bamboo-hr" --- > ## Documentation Index > Fetch the complete documentation index at: https://help.claritysecurity.com/llms.txt > Use this file to discover all available pages before exploring further. # Bamboo HR This guide will teach you how to set up the connector between [BambooHR](https://www.bamboohr.com/j/) and [Clarity Security](https://claritysecurity.io). **Estimated time to complete:** 30 minutes If you encounter any problems, please contact your support team or [support@claritysecurity.io](mailto:support@claritysecurity.io). ## Supported Connector Capabilities ## Below are capabilities supported by the connector at this time. | **Method** | **Supported** | | --- | --- | | Provision User | No | | List Groups, Policies, and Roles | N/A | | Add User to Groups, Policies, and Roles | No | | Remove User from Groups, Policies, and Roles | No | | Deactivate User | No | | Delete User | No | ## ## How to Setup the Connector ### Step 1: Log into your BambooHR Tenant ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679497715745.png?sv=2026-02-06&spr=https&st=2026-11-09T22%3A08%3A51Z&se=2026-11-09T23%3A08%3A51Z&sr=c&sp=r&sig=xiVTuK0xhHMabQYCTqXEevVcBPA6zoLW0xF1eP4evxc%3D) ### Step 2: Click the Gear icon to navigate to the settings page. ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679497920664.png?sv=2026-02-06&spr=https&st=2026-11-09T22%3A08%3A51Z&se=2026-11-09T23%3A08%3A51Z&sr=c&sp=r&sig=xiVTuK0xhHMabQYCTqXEevVcBPA6zoLW0xF1eP4evxc%3D) ### Step 3: Create a Custom Access Level for the Clarity Connector. Select Access Levels > Levels > Custom Access Level ### ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679498002049.png?sv=2026-02-06&spr=https&st=2026-11-09T22%3A08%3A51Z&se=2026-11-09T23%3A08%3A51Z&sr=c&sp=r&sig=xiVTuK0xhHMabQYCTqXEevVcBPA6zoLW0xF1eP4evxc%3D) ### Step 4: Name the Custom Access Level. Access Level Name: Choose a descriptive name, such as “Clarity Service Account Access” Description: Write a helpful description. ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679498087305.png?sv=2026-02-06&spr=https&st=2026-11-09T22%3A08%3A51Z&se=2026-11-09T23%3A08%3A51Z&sr=c&sp=r&sig=xiVTuK0xhHMabQYCTqXEevVcBPA6zoLW0xF1eP4evxc%3D) ### Step 5: Do not grant any abilities to the Custom Access Level. ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679498247303.png?sv=2026-02-06&spr=https&st=2026-11-09T22%3A08%3A51Z&se=2026-11-09T23%3A08%3A51Z&sr=c&sp=r&sig=xiVTuK0xhHMabQYCTqXEevVcBPA6zoLW0xF1eP4evxc%3D) ### Step 6: Grant the following View Only permissions. **Basic Info**: Status, Employee #, First Name, Last Name, Middle Name, Preferred Name. ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679498324940.png?sv=2026-02-06&spr=https&st=2026-11-09T22%3A08%3A51Z&se=2026-11-09T23%3A08%3A51Z&sr=c&sp=r&sig=xiVTuK0xhHMabQYCTqXEevVcBPA6zoLW0xF1eP4evxc%3D) **Contact:** Work Email ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679498379123.png?sv=2026-02-06&spr=https&st=2026-11-09T22%3A08%3A51Z&se=2026-11-09T23%3A08%3A51Z&sr=c&sp=r&sig=xiVTuK0xhHMabQYCTqXEevVcBPA6zoLW0xF1eP4evxc%3D) **Job:** Direct Reports ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679498413478.png?sv=2026-02-06&spr=https&st=2026-11-09T22%3A08%3A51Z&se=2026-11-09T23%3A08%3A51Z&sr=c&sp=r&sig=xiVTuK0xhHMabQYCTqXEevVcBPA6zoLW0xF1eP4evxc%3D) **Employment** **Status:** Date & Employment Status ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679498479076.png?sv=2026-02-06&spr=https&st=2026-11-09T22%3A08%3A51Z&se=2026-11-09T23%3A08%3A51Z&sr=c&sp=r&sig=xiVTuK0xhHMabQYCTqXEevVcBPA6zoLW0xF1eP4evxc%3D) **Job Information**: Job Title, Department, Division, Location, and Reporting To ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679498520394.png?sv=2026-02-06&spr=https&st=2026-11-09T22%3A08%3A51Z&se=2026-11-09T23%3A08%3A51Z&sr=c&sp=r&sig=xiVTuK0xhHMabQYCTqXEevVcBPA6zoLW0xF1eP4evxc%3D) ### Step 7: Click Save and Finish. ### Step 8: Create the API account (Non-Employee BambooHR User) If redirected, return to the newly created Custom Access Level by following the path: Gear Icon / Settings > Access Levels > Custom Levels. ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679498686570.png?sv=2026-02-06&spr=https&st=2026-11-09T22%3A08%3A51Z&se=2026-11-09T23%3A08%3A51Z&sr=c&sp=r&sig=xiVTuK0xhHMabQYCTqXEevVcBPA6zoLW0xF1eP4evxc%3D) Click the Gear Icon > Add a Non-Employee BambooHR User on the Custom Access Level page. ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679498746369.png?sv=2026-02-06&spr=https&st=2026-11-09T22%3A08%3A51Z&se=2026-11-09T23%3A08%3A51Z&sr=c&sp=r&sig=xiVTuK0xhHMabQYCTqXEevVcBPA6zoLW0xF1eP4evxc%3D) Create the name for the API Account. ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679498811184.png?sv=2026-02-06&spr=https&st=2026-11-09T22%3A08%3A51Z&se=2026-11-09T23%3A08%3A51Z&sr=c&sp=r&sig=xiVTuK0xhHMabQYCTqXEevVcBPA6zoLW0xF1eP4evxc%3D) ### Step 9: Log into your BambooHR Tenant using the credentials of the API Account. ### Step 10: Create the API key. Click on the Account Icon in the upper right-hand corner > API Keys ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679498909285.png?sv=2026-02-06&spr=https&st=2026-11-09T22%3A08%3A51Z&se=2026-11-09T23%3A08%3A51Z&sr=c&sp=r&sig=xiVTuK0xhHMabQYCTqXEevVcBPA6zoLW0xF1eP4evxc%3D) Click Add New Key ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679498980309.png?sv=2026-02-06&spr=https&st=2026-11-09T22%3A08%3A51Z&se=2026-11-09T23%3A08%3A51Z&sr=c&sp=r&sig=xiVTuK0xhHMabQYCTqXEevVcBPA6zoLW0xF1eP4evxc%3D) Name the API Key, then click Generate Key. ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679499006001.png?sv=2026-02-06&spr=https&st=2026-11-09T22%3A08%3A51Z&se=2026-11-09T23%3A08%3A51Z&sr=c&sp=r&sig=xiVTuK0xhHMabQYCTqXEevVcBPA6zoLW0xF1eP4evxc%3D) API Key WarningCopy the API Key that is generated into Clarity before clicking Done! You will not be able to view or copy the key once you click done. ### Step 11: Log into your Clarity Security Portal. ### Step 12: Click On Applications. Select Marketplace. Then search for BambooHR and click connect. ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679499332997.png?sv=2026-02-06&spr=https&st=2026-11-09T22%3A08%3A51Z&se=2026-11-09T23%3A08%3A51Z&sr=c&sp=r&sig=xiVTuK0xhHMabQYCTqXEevVcBPA6zoLW0xF1eP4evxc%3D) ### Step 13: Configure the connection. Copy your API key from step 10 into the matching field and enter your BambooHR subdomain. Find your BambooHR subdomain.If you go to [https://demo.bamboohr.com](https://demo.bamboohr.com) to log into BambooHR, your subdomain is the demo. ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679499481941.png?sv=2026-02-06&spr=https&st=2026-11-09T22%3A08%3A51Z&se=2026-11-09T23%3A08%3A51Z&sr=c&sp=r&sig=xiVTuK0xhHMabQYCTqXEevVcBPA6zoLW0xF1eP4evxc%3D) ### Step 14: Configure the additional Application Settings Complete the App Settings form. Details for each field can be found in the following article: [Common App Configuration Steps](/v1/docs/common-app-steps#step-2-app-settings). ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679499628271.png?sv=2026-02-06&spr=https&st=2026-11-09T22%3A08%3A51Z&se=2026-11-09T23%3A08%3A51Z&sr=c&sp=r&sig=xiVTuK0xhHMabQYCTqXEevVcBPA6zoLW0xF1eP4evxc%3D) ### Step 15: User Settings Complete the User Settings form, and check the table at the top to see if any features are unsupported. Details for each field can be found in the following article: [Common App Configuration Steps](/v1/docs/common-app-steps#step-3-user-settings). ![Configure App Step 3 - User Settings](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Configure%20App%203(2).png?sv=2026-02-06&spr=https&st=2026-11-09T22%3A08%3A51Z&se=2026-11-09T23%3A08%3A51Z&sr=c&sp=r&sig=xiVTuK0xhHMabQYCTqXEevVcBPA6zoLW0xF1eP4evxc%3D) ### Step 16: Validate Your Selections and Save SaveClicking the Save button will trigger the first full sync for your application (even if you selected Manual syncing).  This includes Service Users, Entitlements, Service User Entitlements, Service User Attributes. ## Need Help? If you have any problems, contact your customer success team. You can also get in touch with our general support [via email](mailto:support@claritysecurity.io), open a [support ticket](https://support.claritysecurity.com/home). Our general support team is available Monday - Friday from 8:00 AM - 6:30 PM CST. A Service User is a user, or service account, discovered by Clarity in a downstream application. An Entitlement is an assignable permission found in a downstream application. Common examples include licenses, groups, and policies. Service User Entitlements are the pairings of users and active entitlement access in downstream applications. An attribute is a piece of information used to describe a service user, entitlement, or identity. Common examples include First Name, Last Name, Job Title, Department, etc.