Paycor Onboarding

Paycor Onboarding is a provider of Human Resources software and services. Its onboarding system has been crafted to streamline HR processes and offer a centralized platform for the management of employee data and HR functions. It includes features such as an employee self-service portal, performance management, time tracking, among others.

Paycor Onboarding Connection Set Up

Hire2Retire will utilize OAuth 2.0 authentication for establishing the connection. You must have a Paycor account for authentication. To setup Paycor Onboarding as an Onboarding system on Hire2Retire, you have to:

• Set up a Paycor Application
• Create Paycor Onboarding Connection on Hire2Retire

The Hire2Retire platform provides two connection types for Paycor Onboarding applications:

1. Service Provider Application - This option lets you connect using the RoboMQ managed application.
2. Customer Owned Application - This option lets you connect using your own Paycor Onboarding application credentials.

Set up a Paycor Application

Note: These steps are common for both Paycor Onboarding production and sandbox environment setup.

1. Log into the Paycor Development Portal.  

2. Go to the Applications tab and click on + Application button and type your application name.

   

   Figure 1 Add Application in Application Tab

3. You will get the Client ID, Client Secret. These details will be required while creating a connection on Hire2Retire. Once you acknowledge the client ID and Secret, you will be redirected to your newly created application page.

   

   Figure 2 Client ID, Client Secret pop up

4. Navigate to the Security Connection tab, you can find the APIm Subscription Key there. The Subscription Key will be required while setting up connection on Hire2Retire. Add the following URL inside the Approved Return OAuth URL Textbox. https://hire2retire.robomq.io/api/auth/callback/PaycorOnboarding

   

   Figure 3 Security Connections Tab of your created connection

5. Navigate to the Data Access tab and create a scope by giving the following permissions.

   • View Legal Entity Onboarding Employees
   • View Employee Information

   

   Figure 4 Data Access Tab

   To know more about data access scopes, you can refer to Paycor Onboarding Data Access Scopes.

   Please note once the application is created, Company/HR/Payroll Paycor Perform Admin role is required to complete the activation process in the production environment.

6. After creating the scope, navigate to the General tab and you can find the name of the scope you just created.

   

   Figure 5 General Tab of Paycor Application

Create Paycor Onboarding Connection on Hire2Retire

You can configure Paycor Onboarding in Hire2Retire using either a Service Provider Application connection or a Customer Owned Application connection.

Service Provider Application

Use this option when you want to use the RoboMQ managed Paycor Onboarding application.

• Connection Name - A user defined nomenclature for your connection. By default, the connection name is Connection-Service Provider Application-1, you can change it as per your preferences.
• Environment - Select the Paycor Onboarding environment that you want to connect, such as Production or Sandbox.

Figure 6. Paycor Onboarding Service Provider Application Connection Set Up Page

After entering the details, click the Link Account button to continue.

Customer Owned Application

Use this option when you want to use your own Paycor Onboarding application credentials created in the Paycor developer portal.

• Connection Name - A user defined nomenclature for your connection. By default, the connection name is Connection-Customer Owned Application-1, you can change it as per your preferences.
• Environment - Select the Paycor Onboarding environment that you want to connect, such as Production or Sandbox.
• Client ID of Paycor Onboarding - You will get your client ID after adding the application in Paycor or you can find it on the Security Connection tab.
• Client Secret - You will get your client secret after adding the application in Paycor or you can regenerate it from the Security Connection tab.
• Scope ID - You can find it on the General tab once you create scopes on the Data Access tab.
• APIM Subscription Key - You can find your subscription key in the Paycor Security Connection tab.

Environment is important when setting up the connection. A sandbox account in Paycor refers to a test environment provided by Paycor for developers and users to experiment. A sandbox account has sandbox in the development portal URL.

Figure 7. Paycor Developer Page for Sandbox Environment

Figure 8. Paycor Onboarding Customer Owned Application Connection Set Up Page

After entering the required details, click the Link Account button to continue.

Complete Paycor Onboarding Activation

After clicking the Link Account button for either connection type, Hire2Retire will redirect you to Paycor to review the access being requested, based on the application scope and version. You will be prompted to log in to Paycor if you are not already logged in. In this case, enter your Company/HR/Payroll Administrator credentials, as once the application is created, the Company/HR/Payroll Administrator role is required to complete the activation process in the production environment.

Figure 9. Paycor Onboarding App Activation

Select the Paycor Legal Entity ID that you want to integrate. This gives your application access to the client's data.

Figure 10. Paycor Onboarding Select Legal Entity ID

When the connection is created successfully, it becomes active in Hire2Retire and is available for dependent application configurations.

Figure 11. Paycor Onboarding Connection Available for Downstream Configuration

Note: While setting up connection on Hire2Retire if you see a "403" message. It indicates that the logged-in Paycor user doesn't have access to complete the Activation process. User requires "Company/HR/Payroll Administrator" role to complete this. Your Sandbox credentials already have this access, but Production will need to be done by an authorized user.