Connect your HR system

Before you start

You need the HR system administrator admin rights described below, and in Trusterio the right to manage integrations (owners and admins have it). Anybody else sees the page read-only.

Connect it

1. Open Automation and choose Connect on the HR system administrator card. (The link opens the dialog straight away.)
2. Give it a name under What to call it, and read What to grant: every permission and what it is for.
3. Press Add it and enter the credential. You land on the connection’s own page.

In your HR system

• Personio: under Marketplace → Connected integrations → Create custom integration, give read access to Employees and, under Readable employee attributes, tick first name, last name, email, position, department, supervisor, hire date, termination date and status. An attribute you do not grant is simply missing.
• HiBob: create a service user and a permission group for it that may view Basic info, Work and Lifecycle (internal). Remove the group’s condition that limits it to employed people, or people who have left will never show up.
• BambooHR: use the API key of a user who can run custom reports on all employees, past and present.

In Trusterio

Under HR system, say which one it is, then fill in only the credentials for yours: the Personio client ID and secret, the HiBob service user ID and token, or the BambooHR API key with your BambooHR subdomain. Press Save credentials.

Check that the first reading is complete before anything acts on it. A list read wrongly could make somebody look as if they had left.

What it checks

• The roster was read completely
• Everybody has a work address, joiners have a start date, departures are dated, people have a manager

After it is connected

• Press Sync now for the first reading. The Tests tab shows each check: what it should be, what was found, and what is affected.
• New connections are read by hand until you choose a schedule: in Monitoring, on the Collection tab, pick Every hour, Every 6 hours, Daily or Weekly.
• The page says when it was last read and its health; Sync History keeps every run.

A connection marked Beta on the Automation screen has not been tried on a real account yet: its permission list is our reading of the provider’s documentation. AWS, Azure, Google Cloud and Jira have been. If a permission is wrong, tell us.

Disconnect

On the connection’s page, choose Disconnect. Reading stops and its credentials are deleted; its history, checks and evidence stay. Then remove what you created at the provider:

• Delete the API credentials, service user or API key you made for Trusterio.