Bamboo HR Configuration

Bamboo API token

To generate Bamboo API Token log into BambooHR:

1. Go to My Account

2. Click ‘API Keys’ in Account menu

3. Click ‘Add New Key’ button

4. Put name of the key and click ‘Generate key’

5. Copy key that was generated as it will be required in next steps

Prepare Token

1. The token for integration with Bamboo HR is concatenation of the username (e.g. SERVICE-88888), a colon (:) and the Service User token generated in BambooHR (e.g. 0AXAJAIOAN7AZ9A8vA04AlpALpAcKA1lyrSVCOL).

2. The whole string should look like this (for above example): SERVICE-88888:0AXAJAIOAN7AZ9A8vA04AlpALpAcKA1lyrSVCOL

3. Encode above string to Base64 format (can be done with some online service like Base64 Encode and Decode - Online)

4. Save the Base64 encoded Token. This will be used in the next step.

Salesforce Configuration 

Create "External Credential"

1. From Salesforce navigate to Setup > Named Credentials

2. Click on tab External Credentials and create new one with following settings:

   • Label: BambooHR Credentials

   • Name: BambooHRCredentials

   • Authentication Protocol: Custom

   • Click 'Save' button

3. Create new Principal by clicking on New button:

   • Parameter Name: BambooToken

   • Sequence Number: 1

   • Identity Type: Named Principal

4. Click Add button to create Authentication Parameter

   • Name: Token

   • Value: Enter the Base64 encoded Token created earlier.

5. Click 'Save' button

Add Custom Headers

1. From the "External Credential" find the Custom Headers section and select New
   • Name: Authorization
   • Value: {!'Basic ' & $Credential.BambooHRCredentials.Token}
   • Sequence Number: 1
2. Select New once again
   • Name: Accept
   • Value: application/json
   • Sequence Number: 2

Create "Named Credential"

1. Go back to Named Credentials and create new Named Credential

   • Label: BambooHR

   • Name: BambooHR

   • URL: https://api.bamboohr.com/api/gateway.php/{NAME_OF_COMPANY}/

   • Enabled for Callouts: checked

   • External Credential: BambooHR Credentials

   • Allow Formulas in HTTP Header: checked

   • Allowed Namespaces for Callouts: plabs_hrms

Access to created External Credential Principal Access

External Credential Principal Access created earlier should be assigned to Permission Set for users who will be working with the integration. To add this access go to the permission set and click ‘External Credential Principal Access’ on the main page of the permission set.