Skip to main content

​
About BambooHR

Connecting BambooHR lets Iru Identity pull employee records from BambooHR and keep your directory in sync. When someone is hired, changes roles, or leaves, those updates flow into Iru on their own. There’s no report to configure. Iru reads directly from BambooHR’s standard employee directory.
For the BambooHR-specific steps only. For concepts shared across all sync connections (the unique identifier, required fields, IQL, and what happens on each sync), see Directory Sync.

​
Connect BambooHR to Iru Identity

Authorize Iru in BambooHR, then map your fields. Iru sends you to BambooHR to sign in and allow access. Your BambooHR credentials go to BambooHR, not to Iru.
1

Navigate to Directory

Navigate to Directory in the left-hand navigation bar (under Identity). Select the Sync tab.
2

Select Connect Source

Select Connect Source in the upper-right.
3

Select BambooHR

Select the BambooHR tile.
4

Enter connection details

Give the connection a display name and an optional description, then enter your BambooHR company domain (the subdomain in your BambooHR URL, such as acme from acme.bamboohr.com). Iru uses the domain to send you to the right BambooHR account for authorization.
The Configure Bamboo screen with Display name, Description, Company domain, and Next.
5

Select Next

Select Next.
6

Select Connect

On the Connect with Bamboo screen, select Connect. Iru opens a BambooHR window so you can authorize the connection.
The Connect with Bamboo screen with Back, Cancel, and Connect.
7

Sign in to BambooHR

Enter your Email Address and Password, then select Log In. You can also use Log in with a Passkey. Your credentials go to BambooHR, and Iru never sees them. If no window opens, check your browser’s pop-up blocker for the Iru site, then try again.
The BambooHR sign-in window with Email Address, Password, Log In, and Log in with a Passkey.
Authorize with a dedicated admin or integration account that can see every employee you want to sync, so the connection keeps working regardless of any one user’s status.
8

Allow Access

On the Share access with Iru Identity screen, review the data BambooHR shares: OpenID Claims, Employee, Miscellaneous, and Reports, each Read only. Select Allow Access to authorize the connection, or Deny Access to cancel.BambooHR returns you to Iru with the connection authorized. The connection has Configuration, Mapping, Effective Users, and Sync tabs. Iru holds the authorization BambooHR issues, so there is no API key to generate or store.
Finish authorizing within 15 minutes. If the BambooHR window expires, return to Iru and start the connection again.

​
Map Your Data to Iru

BambooHR has a standard set of employee fields (first and last name, work and home email, phone numbers, job title, department, supervisor, hire date, address, and employee ID), so Iru already knows what’s available and lays them out for you to match. There’s nothing to build on the BambooHR side first.
1

Navigate to Directory

Navigate to Directory in the left-hand navigation bar (under Identity). Select the Sync tab.
2

Select the BambooHR source

Select your BambooHR source.
3

Select the Mapping tab

Select the Mapping tab.
4

Set a unique identifier

Choose a unique identifier, typically the BambooHR employee ID. Once you save the connection, it can’t be changed.
5

Map the required attributes

Map email, first name, last name, and username. Everything else is optional.
6

Transform with IQL when needed

Pick a field, or write a short IQL expression. Iru suggests the available BambooHR fields and checks the expression as you type.Examples with BambooHR fields:
  • Build a username from the work email: workEmail.split("@")[0]
  • Combine first and last name: firstName + " " + lastName
  • Prefer work email, fall back to home email: optional.ofNonZeroValue(workEmail).orValue(homeEmail)
See Map your data for more on mapping, including the safe pattern for sometimes-blank fields.

​
Finish and Turn It On

1

Save your mappings

Save your mappings. You’ll land on the connection’s detail page.
2

Enable the connection

Review everything, then select the ellipsis in the upper-right and select Enable. A connection starts disabled, so enabling it kicks off the first import and keeps Iru in sync.
To change or review the connection later, navigate to Directory in the left-hand navigation bar (under Identity), select the Sync tab, then select your BambooHR source. Select the Configuration tab to set how often Iru syncs, the Mapping tab to edit mappings, the Effective Users tab to review who is in sync, or the Sync tab to run Sync now and review activity. If the authorization expires or is revoked, re-authenticate from the Configuration tab.

​
Re-authenticate

When the authorization expires or is revoked, the connection shows Needs re-authentication. Use Re-authenticate from Connection details, then sign in to BambooHR and select Allow Access again. Your mappings are not affected.
The Configuration tab of a Bamboo connection showing Needs re-authentication and a Re-authenticate action.
1

Navigate to Directory

Navigate to Directory in the left-hand navigation bar (under Identity). Select the Sync tab.
2

Select the BambooHR source

Select your BambooHR source.
3

Select the Configuration tab

Select the Configuration tab, then select Re-authenticate. Iru opens a BambooHR window.
4

Sign in to BambooHR

Enter your Email Address and Password, then select Log In. You can also use Log in with a Passkey.
5

Allow Access

On the Share access with Iru Identity screen, select Allow Access. BambooHR returns you to Iru with the connection authorized.
Finish authorizing within 15 minutes. If the BambooHR window expires, return to Iru and select Re-authenticate again.

​
Considerations

Two things differ. Workday takes Integration System User credentials in Iru’s form, while BambooHR sends you to BambooHR to sign in and allow access. Workday also has an extra step where you point Iru at a custom report, while BambooHR reads its standard employee directory, so you go straight from authorizing to mapping. Everything else (the unique identifier, required fields, and IQL) works the same way. See Connect Workday.

Directory Sync

The shared concepts behind every Directory Sync provider.

Connect Workday

The other supported HR system. Includes a report step.