黑料海角91入口

Integrate BambooHR with your 黑料海角91入口 account to seamlessly manage and onboard new employees by automatically importing and updating users and their attributes to 黑料海角91入口. This helps limit manual overhead for HR and IT organizations, reduces input error and in combination with the Single Sign On (SSO) with BambooHR SAML connector, 黑料海角91入口 provides access to all employee resources through a single set of credentials. 

Prerequisites

• A 黑料海角91入口 administrator account
• 黑料海角91入口 SSO Package or higher or SSO 脿 la carte option
• A Full Admin account and BambooHR 鈥渁dvantage鈥� package at minimum
• Your BambooHR tenant
• Review Bamboo HR's  article

Important Considerations

• Email BambooHR Support to enable the 黑料海角91入口 integration on your account
• Configuring 黑料海角91入口 SSO for BambooHR is recommended, but not required
  • 黑料海角91入口 won鈥檛 manage or consume the BambooHR password. Setting up SSO with the BambooHR User Portal will let your Users access the Bamboo portal using their 黑料海角91入口 credentials
  • 黑料海角91入口 managed users must have an email address that corresponds to an email address associated with a BambooHR account
• BambooHR will be the identity source once the SCIM integration is configured and serves as the 鈥渕aster鈥� for user attributes. Once that identity is in 黑料海角91入口, admins can manage access, authentication, and extend that identity to all 黑料海角91入口 managed resources 
• The SCIM integration is managed by BambooHR. Please contact BambooHR Support for support
• The SCIM integration only sends employee records - user records not sent
• The SCIM integration is one-way - the employee identities are sent from BambooHR to 黑料海角91入口
• Bamboo sends both active and inactive employee records. You will need to monitor the users that are created to ensure any inactive employees that should not be in 黑料海角91入口 are deleted:
  • You will need to contact your Account Manager or Account Services to let them know when this situation occurs, so billing can be managed appropriately
  • If you do not want inactive users to be created, you can remove the work email for the employees who are inactive and store it in the "notes" tab for future reference. Removing the work email value will prevent the records from syncing to Jumpcloud
• We strongly recommend setting Staged as the user default for Manual / Single User API in Settings > User Management > Default User State for User Creation in 黑料海角91入口. Read Manage User States to learn more
  • You can easily identify new users created by the integration
  • You can assign resources without granting access before the user's start date
  • You can control whether or not an email is sent to the user when they are activated
  • You can activate the user by changing their user state
• When a user is created in BambooHR as an employee, they will automatically be created in 黑料海角91入口 on the next scheduled sync based on the settings for the 黑料海角91入口 app in BambooHR
• If a specific minute is selected from the minute dropdown, that will result in data being sent at that minute past the hour every hour. It does not result in a sync occurring in that minute time interval.  For example, selecting 5 for the minute will result in the data being sent to 黑料海角91入口 at 5 minutes past the hour every hour
  • If you want to sync data more frequently than hourly, select the Every Day, Every Month, Every Hour, Every Minute options
    

• A user created by this integration will:
  • Be created in the user state specified for Default User State for User Creation for Manual / Single User API
  • Have a pending password status
  • Need to establish and maintain their password within 黑料海角91入口
• Users created in the Active user state won鈥檛 automatically be sent an activation email upon creation 
• Updates to the user attributes specified in the settings for the 黑料海角91入口 app BambooHR will be synced to 黑料海角91入口 as long as the integration is active
• Group import isn鈥檛 supported 
• An employee record in BambooHR must have a company email address for the information to be sent to 黑料海角91入口 

Attribute Considerations

• Any attributes that have been selected within BambooHR for export to 黑料海角91入口 will overwrite values existing in 黑料海角91入口 with each update that is triggered in BambooHR
  • It's recommended to Enable read-only on the user鈥檚 portal profile page for all users in the Organization Settings to prevent users and administrators from updating attributes in 黑料海角91入口

Creating a new 黑料海角91入口 Application Integration

1. Log in to the .
2. Go to听USER AUTHENTICATION听&驳迟;听SSO Applications.
3. Click + Add New Application.
4. Type the name of the application in the Search field and select it.
5. Click Next.
6. In the Display Label, type your name for the application. Optionally, you can enter a Description, adjust the User Portal Image and choose to hide or Show in User Portal.

7. Optionally, expand Advanced Settings to specify a value for the SSO IdP URL. If no value is entered, it will default to https://sso.jumpcloud.com/saml2/<applicationname>.

8. Click Save Application.
9. If successful, click:
   • Configure Application and go to the next section
   • Close to configure your new application at a later time

Configuring the SSO Integration

To configure 黑料海角91入口

1. Create a new application or select it from the Configured Applications list.
2. Select the SSO tab.
3. In the ACS URL field, replace <YOURDOMAIN> with your account's registered BambooHR domain name.
4. Add or change any additional attributes.
5. Select save.

Download the certificate

1. Find your application in the Configured Applications list and click anywhere in the row to reopen its configuration window.
2. Select the SSO tab and click IDP Certificate Valid > Download certificate.

To configure BambooHR

1. Log in to BambooHR as an administrator (This user's email should also be managed by 黑料海角91入口).
2. Select the Apps icon in the upper right.
3. Scroll down to the Single Sign-On section, and select the SAML 2.0 icon.
4. Select the Install button next to the SAML 2.0 icon.
5. Enter the following information:
   • SSO Login URL - enter the 黑料海角91入口 IDP URL.
   • x.509 Certificate - copy and paste the contents of the certificate downloaded in the previous section.
6. Optionally, select Allow optional email & password login.

7. Select Install.

Authorizing User SSO Access

Users are implicitly denied access to applications. After you connect an application to 黑料海角91入口, you need to authorize user access to that application. You can authorize user access from the Application Configuration panel or from the Groups Configuration panel. 

To authorize user access from the Application Configuration panel

1. Log in to the .
2. Go to USER AUTHENTICATION > SSO Applications, then select the application to which you want to authorize user access.
3. Select the User Groups tab. If you need to create a new group of users, see Get Started: User Groups.
4. Select the check box next to the group of users you want to give access.
5. Click save. 

To learn how to authorize user access from the Groups Configuration panel, see Authorize Users to an SSO Application.

Validating SSO user authentication workflow(s)

IdP-initiated user workflow

• Access the
• Go to听Applications and click an application tile to launch it
• 黑料海角91入口 asserts the user's identity to the SP and is authenticated without the user having to log in to the application

SP-initiated user workflow

• Go听to the SP application login - generally, there is either a special link or an adaptive username field that detects the user is authenticated through SSO

• Login redirects the user to 黑料海角91入口 where the user enters their 黑料海角91入口 credentials
• After the user is logged in successfully, they are redirected听back to the SP and automatically logged in

Configuring the Identity Management Integration

To configure BambooHR 1

1. Log in to your Bamboo administrator account.
2. From the Home page, select the gear icon in the top right hand corner. This brings up your Settings page. 
3. Under your Account information, select Apps.
4. On the next page, under Not Installed, scroll down to find 黑料海角91入口, click Install. 
5. A 黑料海角91入口 Settings modal pops up, for the question: When would you like your data to be sent?* 
   • The integration is set to send changes every minute by default. We recommend these settings for the most immediate sync. If you want a different schedule, you can customize the cadence that updates sync.
6. For the next question: Which fields do you want to send to 黑料海角91入口?* Determine which attributes you鈥檇 like to manage consistently in BambooHR and sync to 黑料海角91入口.
7. Keep this page open.

To get your 黑料海角91入口 API Key

1. Log in to the with the administrator account you want to use to generate the API key for this integration.
2. Click your initials in the top right corner.
3. Select My API Key.
4. Click on Generate New API Key.
5. Copy the API Key and store it securely, or leave this tab open while you complete the integration configuration steps in the SP.

To configure BambooHR 2

1. Back on your BambooHR page, in the 黑料海角91入口 Settings modal, paste the 黑料海角91入口 API Key under Add 黑料海角91入口 provided API Key* 
2. Click Install. You will receive a notification that 黑料海角91入口 was successfully installed.
3. Your integration is now established. If you go back to your 黑料海角91入口 Administrator console, go to USER MANAGEMENT > Users and refresh the page, you will see newly added users.
   • If you set Staged as the default state, you can see a filtered view of just those users by clicking Staged option above the users list.
   • If you set Active as the default state, you can filter the All or Active view to just users with a password pending password status.

Attribute Mappings

The following table lists attributes that BambooHR sends to 黑料海角91入口. Any updates to the fields selected in the settings for the 黑料海角91入口 app will trigger an update to those values in 黑料海角91入口 with the exception of work extension.

Removing the Integration

To deactivate the IdM Integration

1. Log in to the .
2. Go to USER AUTHENTICATION > SSO Applications.
3. Search for the application that you鈥檇 like to deactivate and click to open its details panel. 
4. Under the company name and logo on the left hand panel, click the Deactivate IdM connection link.
5. Click confirm. 
6. If successful, you will receive a confirmation message.

To deactivate the SSO Integration or Bookmark

1. Log in to the .
2. Go to USER AUTHENTICATION > SSO Applications.
3. Search for the application that you鈥檇 like to deactivate and click to open its details panel. 
4. Select the听SSO or Bookmark听tab.
5. Scroll to the bottom of the configuration.
6. Click Deactivate SSO or Deactivate Bookmark. 
7. Click save. 
8. If successful, you will receive a confirmation message.

To delete the application

1. Log in to the .
2. Go to USER AUTHENTICATION > SSO Applications.
3. Search for the application that you鈥檇 like to delete.
4. Check the box next to the application to select it.
5. Click Delete.
6. Enter the number of the applications you are deleting
7. Click Delete Application.
8. If successful, you will see an application deletion confirmation notification.