OAuth 2.0 Now Supported for API Authentication

OAuth 2.0 is now supported as the primary authentication method for accessing the BambooHR API. This new standard replaces the need for legacy API key generation via the oidcLogin endpoint and aligns with modern security and authorization best practices. OAuth 2.0 enables more secure, flexible, and scalable integrations, including support for granular scopes and token-based authentication flows.

We encourage all new integrations to adopt OAuth 2.0 moving forward, and recommend that existing applications begin transitioning away from the User API Key login flow to ensure long-term compatibility.