What is Finch?
Some of our Human Resource (HR) vendor integrations utilize Finch, a Human Resources API connector. This implementation detail should not affect your experience of the integration, and no sign up or action items are required on your end.
We utilize Finch's read-only APIs and all data is encrypted in our database.
To set up with HR vendors supported by Finch, simply follow the steps to connect which include descriptions of the access level and permissions being utilized in the integration.
What are Assisted Connect Vendors?
Assisted Connect is a method for connecting to your HR provider in a semi-automated fashion. Instead of entering your admin username and password, your HR admin will need to follow a step-by-step guide to create an admin account for Secureframe within your HR system.
🚨Important Note: It's essential to follow these instructions carefully, including adding the Secureframe admin user to the HR system, to prevent integration failures or pending statuses.
Assisted Connect being a semi-automated process requires some amount of manual work, which can be broken down into two phases: net new data intake and data refresh.
The turnaround time for both phases will be two weeks. Therefore, there will be a two-week delay upon connecting an Assisted Connect Vendor for the first time, as well as a two-week delay between data refresh syncs, including those that you trigger manually.
Step-by-Step: How to Connect a Finch HR Integration
(Example: Ceridian Dayforce)
Some HR platforms, such as Ceridian Dayforce, are classified as Assisted Vendors. These require a few additional steps to grant access and complete the setup. Below is an example of what to expect during the integration process.
đź“ť Note: While this guide uses Ceridian Dayforce as an example, all assisted vendor integrations follow a similar pattern.
Step-by-Step Instructions
Head into Secureframe, click on Integrations, then click the Available Tab, then search for the integration in question. Assuming this integration is a Finch connected integration, follow the steps below which are already provided in Secureframe.
-
Initiate the Connection
-
Click Start Connection from the integration setup page in Secureframe.
-
You’ll be reminded that syncing may take up to 14 days after access is granted.
-
-
Authorize via Finch
-
A pop-up will appear explaining that Secureframe uses Finch to securely connect to your payroll/HR system.
-
Click Continue to proceed.
-
-
Review Permission Request
-
You will be prompted to approve Secureframe's access to:
-
Company directory and org structure
-
Employee contact and address information
-
Employment details
-
-
-
Grant Admin Access in Your HR System
-
You must add Secureframe as an admin within your HR system.
-
Instructions and contact info will be provided (example credentials below):
-
Name: Secureframe Admin
-
-
Follow Finch’s setup instructions and return to Secureframe once complete.
-
-
Confirm Completion
-
Check the box confirming you’ve completed the steps.
-
Click Complete to finalize the request.
-
Once these steps are completed, Finch will begin syncing your data in coordination with the vendor, which may take up to 14 days.
Finch Permissions and Fields Pulled
|
Permissions (scope) |
/employer/directory /employer/individual /employer/employment |
|
Device Fields we pull |
third_party_id first_name last_name active start_date end_date role manager department_id employee_type secondary_email |
|
Read/Write |
Read only |
Data Sync Schedule and Manual Syncs
- Sync Schedule: Data synchronizations are generally completed weekly on Tuesdays. After setting up the integration, please allow until the following Tuesday for the initial data sync to complete.
- Manual Syncs: If immediate data synchronization is required outside of the regular schedule, please contact our Support, Implementation, or Engineering teams. They can initiate a manual sync via our internal tools to expedite the process.
Common Issues & Troubleshooting
| Problem | Possible Cause | Resolution |
|---|---|---|
| Data not syncing | Admin access not granted | Double-check Secureframe was added as admin |
| Permissions error | Finch auth timed out | Re-initiate the connection |
| Only partial data pulled | Restricted role permissions | Grant full read access as outlined |
Secureframe partners with Finch to enable certain HRIS integrations. If you are using a Finch-powered integration and encounter issues during the setup process, Finch handles the connection and troubleshooting directly.
To get support:
-
Follow these steps to grant Finch admin access to your HRIS system.
-
Once access is granted, Finch can complete the connection or investigate any setup issues.
If you need additional help, please contact your Customer Success Manager or email success@secureframe.com to help expedite the process.
How to add an admin for providers that require help from a representative
Frequently Asked Questions (FAQ)
Why do I need to contact Finch for support?
- Finch is our trusted partner for connecting to your HRIS provider. While Secureframe initiates the integration, Finch handles the technical connection and any necessary troubleshooting. If you're experiencing issues, they’re best equipped to resolve them quickly and securely.
Why is this integration taking so long to connect?
- Some HRIS providers require additional permissions or manual steps to complete the integration. In these cases, Finch may need to work with a representative from your organization to gain admin access. Delays often happen when access hasn’t been granted or when additional provider-specific steps are required. To speed things up, we recommend following these instructions as soon as possible.
Why does the Ceridian Dayforce integration and other Finch HR integrations request access to payroll, benefits, and garnishment data if Secureframe only needs basic employee info (e.g., name, email, job title)?
- While Secureframe only uses basic employee details for compliance automation, our integration partner Finch currently does not support fine-grained permission scoping. This means that broader categories of data (like payroll, benefits, and garnishments) are requested during the connection process, even though they are not accessed or used by Secureframe.
- The Finch product and integration teams are aware of this limitation and are exploring ways to offer more granular permissions in the future. In the meantime, rest assured that Secureframe only ingests the specific data necessary for your integration's scope.
- You can also refer to Finch’s Security Whitepaper for more details on how your data is protected.
Why do I need to share administrator permissions with Finch?
Administrator (admin) permissions are often required to access personal or sensitive employee information from HRIS and payroll systems. This depends on the system, but might include details like name, residence, salary, benefits, or ssn.
Details like these may be required to facilitate:
- Automatic onboarding for an employer
- Employee directory imports
- Onboarding or off-boarding of individual employees
- Collection of income or employment information for an individual
- Benefit eligibility checks for employees
- Benefit enrollment for employees
- Audits of payroll or benefits information
Before collecting any information through Finch, Applications are required to obtain explicit permission from the employer. Finch will not share any data with the Application unless you've consented to do so through Finch Connect.
The following is an example of what this might look like in Finch Connect:
Comments
0 comments
Article is closed for comments.