Skip to main content

​
About BambooHR

BambooHR’s REST API uses HTTPS and HTTP Basic: username = API key, password = literal x (or any non-empty string BambooHR ignores). Requests target https://YOUR_SUBDOMAIN.bamboohr.com/api/.... Iru stores subdomain first, then credentials.

​
How It Works

BambooHR’s REST API uses HTTP Basic over HTTPS: username = your API key, password = the literal x (BambooHR ignores the password field beyond requiring it to be non-empty). Requests target https://{subdomain}.bamboohr.com/api/gateway.php/{subdomain}/v1/. The wizard collects subdomain first, then the key.
DetailValue
CategoryHRIS
AuthenticationBasic (API key + x)
Official references: Getting started, API reference.

​
Prerequisites

  • Your subdomain (acme from https://acme.bamboohr.com).
  • Ability to create an API key under your BambooHR profile.

​
Connect BambooHR to Iru

Complete this tab before you connect the source in Compliance.
1

Sign in to BambooHR

Sign in at your company subdomain (for example https://yourcompany.bamboohr.com) with an account allowed to manage API keys.
2

Open your profile menu

Click your name in the upper-right (or the profile menu BambooHR shows for your account).
3

Open API Keys

Select API Keys (sometimes under Account or My settings, depending on your BambooHR layout).
4

Add a new key

Choose Add a New Key (or Generate new key). Enter a label such as Iru Compliance so operators know what uses this key.
5

Generate and copy the key

Generate the key and copy the value immediately. BambooHR uses this value as the HTTP Basic username in Iru; the password is the literal x as described on the Iru Compliance tab.
Continue on the Iru Compliance tab.

​
Troubleshooting

Check pop-up blocker settings for the Iru site and try again.
Full API key; regenerate if unsure.
Fix subdomain and reconnect.
API inherits user permissions - connect with an HR-privileged account if needed.

Sources Management

Browse and manage every Compliance source.

Getting Started With Compliance

Frameworks, actions, and Artifacts.

Iru Overview

How Endpoint, Compliance, and Identity fit together.

Artifacts Management

Upload, review, and organize evidence from sources and actions.