BambooHR
Joiners, movers and leavers. Prerequisites, setup steps and troubleshooting.
What it does
BambooHR is the joiner, mover and leaver record behind access-review and onboarding controls: who was hired, who left and on what date.
Prerequisites
- A cSquare GRC workspace where you are an owner or admin.
- Connection method: API key or token.
- Access needed at BambooHR: Read-only. The key inherits the permissions of the user who created it, so use a read-only HR role.
Set up
Open Settings > Integrations in the app, find BambooHR, then:
- Sign in to BambooHR, open your profile menu and select API Keys.
- Generate a key for cSquare and copy it.
- Enter your BambooHR subdomain (the part before .bamboohr.com) with the key here.
Verify the connection
- Back in Settings > Integrations, BambooHR should show Connected with a recent sync time.
- Open Evidence and filter by source BambooHR. The first sync can take a few minutes.
- Open a control that depends on BambooHR and confirm the new evidence is linked.
AI prompts
Paste these into Fibo in the app, or into any assistant connected through MCP.
I just connected BambooHR to cSquare GRC. Check that it is syncing, list the evidence it has collected so far, and tell me which controls in my active programs now have evidence from BambooHR.
Which controls in my programs could be covered by BambooHR evidence but still have no current evidence? Group them by framework and suggest what to collect.
Troubleshooting
401 Unauthorized
The subdomain is wrong or the key was revoked. Use the bare subdomain, not the full URL, and reissue the key.
Employees missing termination dates
The API-key user cannot see terminated employees. Give that user access to former employees in BambooHR.
Test connection fails immediately
Nine times out of ten the credential was pasted with a trailing space, or it was issued in a different tenant or region. Re-copy it and try again.
The connector is quarantined
Collection paused after three consecutive failures. Fix the credential, then use Re-test and re-enable on the Active connections tab; it only resumes when the test passes.
Connected, but no evidence appears
Check that at least one collection type is selected and that the account can see the resources. Read-only accounts scoped to a single project will only return that project.
Still stuck?
My BambooHR connector in cSquare GRC is failing. Here is the error I see: <paste error>. Walk me through the likely causes and the exact fix, step by step.