> ## Documentation Index > Fetch the complete documentation index at: https://docs.stackone.com/llms.txt > Use this file to discover all available pages before exploring further. # BambooHR OAuth 2.0 connector profile – StackOne setup guide > Set up the OAuth 2.0 connector profile for BambooHR in StackOne. One-time admin setup required before your users can link BambooHR accounts via Hub. A BambooHR Developer Portal account is required to register an OAuth application.
Select Actions to adjust the guide
Some actions may require additional configuration in the provider to be accessible. Choose the actions you need and the guide will be updated.
Action
Scope(s)
Loading actions...
Dynamic Guide URL
Scopes Selected

          

            
Separator

Register an OAuth Application

Register an application in the BambooHR Developer Portal to enable OAuth 2.0 authentication.

Go to the BambooHR Developer Portal and create a free account if you don't have one.

On your Developer Portal dashboard, create a new application:

  • Click the Add application button in the top-right corner of the Applications list page
  • Provide your application name (e.g., `StackOne Integration` — you can choose any name)
  • Click Create Application
BambooHR Developer Portal Applications list with the Add application button highlighted in the top-right corner

After being redirected to the app, click App details

  • Set the redirect URI as `https://api.stackone.com/connect/oauth2/bamboohr/callback`
  • Click Save Changes
Application Details dialog showing the Redirect URIs field where the StackOne callback URL is entered

Under App Credentials, the Client ID and Client Secret are masked by default — click the eye icon next to each value to reveal it, then copy both and store them securely for use later.

App details page with the App Credentials section showing the masked Client ID and Client Secret fields and their reveal (eye) icons
Enables actions: Assign Time Off Policies, Clock In Employee, Clock Out Employee, Close Goal, Create Application Comment, Create Candidate, Create Company File Category, Create Employee, Create Employee Dependent, Create Employee File Category, Create Employee Training Record, Create Goal, Create Goal Comment, Create Hour Record, Create Or Update Clock Entries, Create Or Update Hour Entries, Create Or Update List Values, Create Project Task, Create Table Row, Create Time Off History Item, Create Time Off Request, Create Time Tracking Project, Create Training Category, Create Training Type, Create Webhook, Delete Clock Entries, Delete Company File, Delete Employee Training Record, Delete Goal, Delete Hour Entries, Delete Hour Record, Delete Table Row, Delete Training Type, Delete Webhook, Get Changed Employee IDs, Get Company Information, Get Dataset Data, Get Dataset Fields, Get Report, List Company Holidays, List Datasets, List Employees Directory, List Project Tasks, List Reports, List Shift Differentials, List Time Tracking Projects, Reopen Goal, Request Custom Report, Update Applicant Status, Update Company File, Update Employee, Update Employee Dependent, Update Employee Training Record, Update Goal, Update Hour Record, Update Table Row, Update Time Off Balance, Update Time Off Request Status, Update Webhook, Upload Company File, Upload Employee File, Upload Employee Photo

On the App details page, scroll down to the Application Scopes section and select the scopes for your use case. You must also enable `openid` (required for authentication) and `offline_access` (required to issue refresh tokens) — if either is missing on the app, the connection fails with an `invalid_scope` / "An unsupported scope was requested" error. Note: within a resource family a `.write` scope grants read on that same resource, but BambooHR gates several endpoints behind their own read-only scopes (for example `company:info` for company properties, `holidays` for company holidays, `time_tracking:project` for time-tracking projects/tasks, `time_tracking:shift_differentials` for shift differentials, and `public.user` for changed-employee sync). Enable every scope listed below. Note: BambooHR rejects requesting both `public.integration` and `public.user` at once, so only `public.user` is requested — but both may be enabled on the app:

App details page scrolled to the Application Scopes section, where scopes are selected per category

When providing scopes in the Auth Config, list only the resource scopes for your use case, space-separated. `openid` and `offline_access` are required and are added automatically — you do not need to include them.
## Creating the StackOne Connector Profile To create the Connector Profile in StackOne for BambooHR: Login to StackOne and navigate to [Connector Profiles](https://app.stackone.com/connector_profiles)
  • Click + Connector Profile
  • Search for and select BambooHR
  • Select Type as OAuth 2.0
  • Fill out the fields using details retrieved from your provider:
    • Client ID
    • Client Secret
    • OAuth Scopes (Optional)
  • (Optional) Select Actions to be enabled for this Connector Profile
  • Click Create profile
 Congratulations! The new Connector Profile will now show up in your project ready to be used. You can now continue to Link Accounts for BambooHR. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.