Fortinet white logo
Fortinet white logo

BambooHR Connector

1.0.0

BambooHR Connector

BambooHR Connector

Category

  • HR

Connection Method

  • API Token
  • Service Account

Supported SSOs for connection

  • Okta
  • Google

Data Collected

  • Misconfigurations
  • 3rd Party Applications
  • Identities

Integration Guide

Intro

Use this guide to add Bamboo HR as a secured SaaS application in FortiCASB-SSPM SaaS Security platform.

Part A: Preparing the API key and token information in Bamboo HR admin

  1. Prepare the Service account details
  2. Create a FortiCASB-SSPM service account
  3. Activate the new service account
  4. Set up the 2-Step Login
  5. Generate an API key

To Begin:

  1. Allocate an email address for a FortiCASB-SSPM Service account

  2. Generate a secure password

  3. Retrieve your BambooHR domain:

    1. The domain name can be found in the URL when you're logged in to your account, and is the string that appears before the ".bamboohr.com". For example: "yourDomain.bamboohr.com" -> yourDomain
  4. Login to FortiCASB-SSPM > Navigate to the App Store > Click on BambooHR

  5. Enter the details you previously saved:

    1. Username: FortiCASB-SSPM service account email address
    2. Password: FortiCASB-SSPM service account password
    3. Domain: Your BambooHR domain

Part B: Create a FortiCASB-SSPM Service Account

  1. Log into your BambooHR environment using the existing Admin user

  2. Select "People" on the page top menu

  3. Create a Service account by creating a New Employee:

    1. Click 'New Employee'
    2. Provide a username, we recommend "FortiCASB-SSPM Service-account"
    3. Enter the email you allocated for the FortiCASB-SSPM service account in the 'Work email' box
  4. Configure the "Self-service access" as allowed:

  5. Create the user.

  6. After creation you can view the user's profile. Select the user settings using the Settings wheel, and through the BambooHR Access Level set the user as "Full Admin"

  7. Use the Settings menu again to Reset the user's password

  8. Log out of BambooHR

Part C: Activate the New Service Account

  1. Check the service account user email

  2. Find the 'BambooHR Reset Password' email and click "Reset password"

  3. Type in a secure password you prepared in step 1

  4. If your organization's settings require 2-Step authentication you will be requested to set it up for the service account user. Otherwise the activation process is over. Continue to Step 4 to complete the 2-Step authentication in either case.

Part D: Set Up the 2-Step Login

  1. If your organization is already configured to require 2-Step authentication skip to sub-step 6. Otherwise, continue to activate the 2-Step authentication setting.

  2. Click on the settings wheel in the top right corner of the website.

  3. Select 'Account' in the left side bar, and click on "2-Step Login" on the sub-menu

  4. Click on 'Get Started', choose a date within the next 30 days on which the MFA will be enforced for all users in the account.

  5. Click 'Enable' to confirm, then refresh the page.

  6. On the Setup 2-Step Login screen:

    1. Click on "Enter Code Manually".

    2. Copy the Secret and save it in your notes. Please note that this would be the only time you can see this code, so save it in a secure place

    3. Click 'Done'

    4. Click 'Next'

  7. Go back to FortiCASB-SSPM

  8. In the open screen select '2FA Required'

  9. Enter the code in the 'OTP Secret' box

  10. Click 'Show Passcode'

  11. Copy the One-Time generated password

  12. Go back to BambooHR, paste the OTP password and confirm

  13. Download the Backup codes and save them in a secure place

Part E: Generate an API Key

  1. To generate an API Key, click on the user picture, in the top right corner of the page, and select "API Keys"

  2. In the API keys page, Click 'Add New Key'

  3. Provide the name "FortiCASB-SSPM_key" in the dialog box and click 'Generate Key'!

  4. Copy the generated key and save it in a secure place.

  5. Click Done

  6. Return to FortiCASB-SSPM and paste the newly generated API key into the API Key box

  7. Click 'Connect'


That's it! You're all set.

Your SaaS security is our priority!

The FortiCASB-SSPM team

Description of image
Previous
Next

BambooHR Connector

BambooHR Connector

Category

Connection Method

Supported SSOs for connection

Data Collected

Integration Guide

Intro

Use this guide to add Bamboo HR as a secured SaaS application in FortiCASB-SSPM SaaS Security platform.

Part A: Preparing the API key and token information in Bamboo HR admin

  1. Prepare the Service account details
  2. Create a FortiCASB-SSPM service account
  3. Activate the new service account
  4. Set up the 2-Step Login
  5. Generate an API key

To Begin:

  1. Allocate an email address for a FortiCASB-SSPM Service account

  2. Generate a secure password

  3. Retrieve your BambooHR domain:

    1. The domain name can be found in the URL when you're logged in to your account, and is the string that appears before the ".bamboohr.com". For example: "yourDomain.bamboohr.com" -> yourDomain
  4. Login to FortiCASB-SSPM > Navigate to the App Store > Click on BambooHR

  5. Enter the details you previously saved:

    1. Username: FortiCASB-SSPM service account email address
    2. Password: FortiCASB-SSPM service account password
    3. Domain: Your BambooHR domain

Part B: Create a FortiCASB-SSPM Service Account

  1. Log into your BambooHR environment using the existing Admin user

  2. Select "People" on the page top menu

  3. Create a Service account by creating a New Employee:

    1. Click 'New Employee'
    2. Provide a username, we recommend "FortiCASB-SSPM Service-account"
    3. Enter the email you allocated for the FortiCASB-SSPM service account in the 'Work email' box
  4. Configure the "Self-service access" as allowed:

  5. Create the user.

  6. After creation you can view the user's profile. Select the user settings using the Settings wheel, and through the BambooHR Access Level set the user as "Full Admin"

  7. Use the Settings menu again to Reset the user's password

  8. Log out of BambooHR

Part C: Activate the New Service Account

  1. Check the service account user email

  2. Find the 'BambooHR Reset Password' email and click "Reset password"

  3. Type in a secure password you prepared in step 1

  4. If your organization's settings require 2-Step authentication you will be requested to set it up for the service account user. Otherwise the activation process is over. Continue to Step 4 to complete the 2-Step authentication in either case.

Part D: Set Up the 2-Step Login

  1. If your organization is already configured to require 2-Step authentication skip to sub-step 6. Otherwise, continue to activate the 2-Step authentication setting.

  2. Click on the settings wheel in the top right corner of the website.

  3. Select 'Account' in the left side bar, and click on "2-Step Login" on the sub-menu

  4. Click on 'Get Started', choose a date within the next 30 days on which the MFA will be enforced for all users in the account.

  5. Click 'Enable' to confirm, then refresh the page.

  6. On the Setup 2-Step Login screen:

    1. Click on "Enter Code Manually".

    2. Copy the Secret and save it in your notes. Please note that this would be the only time you can see this code, so save it in a secure place

    3. Click 'Done'

    4. Click 'Next'

  7. Go back to FortiCASB-SSPM

  8. In the open screen select '2FA Required'

  9. Enter the code in the 'OTP Secret' box

  10. Click 'Show Passcode'

  11. Copy the One-Time generated password

  12. Go back to BambooHR, paste the OTP password and confirm

  13. Download the Backup codes and save them in a secure place

Part E: Generate an API Key

  1. To generate an API Key, click on the user picture, in the top right corner of the page, and select "API Keys"

  2. In the API keys page, Click 'Add New Key'

  3. Provide the name "FortiCASB-SSPM_key" in the dialog box and click 'Generate Key'!

  4. Copy the generated key and save it in a secure place.

  5. Click Done

  6. Return to FortiCASB-SSPM and paste the newly generated API key into the API Key box

  7. Click 'Connect'


That's it! You're all set.

Your SaaS security is our priority!

The FortiCASB-SSPM team

Description of image
Previous
Next