Authorization

When you add a Personio card to a flow for the first time, Okta Workflows prompts you to configure the connection. This connection links to your Personio account and saves your account information, so you can reuse the connection for future Personio flows.

You can create multiple unique connections and manage them from the Connections page in the Okta Workflows Console.

For data security, Okta recommends that you create multiple connections that use the principle of least privilege (PoLP) for each of your use cases. For example, create one connector with read-only access and another connector with update privileges.

Before you begin

As outlined in the Okta Subscription Agreement, electronic data submitted by or on behalf of customers through Okta Workflows must not contain any health, credit card, financial, or other sensitive data. If you choose to save data within your Flow History, any saved information is retained for 30 days.

To use the Personio connector, you need access to the Personio API. Personio restricts API access to customers on their Enterprise subscription plan. See personio.com to see pricing and features.

Start this task

Set up the API credentials in Personio

In your Personio instance, go to Settings.
On the Integrations card, click API Credentials.
Click Generate new credential or select an existing API credential.
For your API credential:
- Name: Enter a unique name for your credentials.
- Integration: Select Other.
- Personal data: Enable the Read and Write checkbox for Employees data.
- Readable employee attributes: Select which employee attributes that you want Okta Workflows to be able to access. To improve the performance of the List Employees card, limit the number of attributes chosen to only those required.
- Click Save.
Click Copy client ID and store it temporarily for use when creating the connector.
Click Copy secret and store it temporarily for use when creating the connector.

In the Personio connector, you can access only the employee attributes specified during API credentials creation.

Create the Personio connection Okta

In the Okta Workflows Console:

Click New Connection.
Enter a Connection Nickname. Make this nickname unique if you want to set up multiple Personio accounts.
Enter your Client ID.
Enter your Client Secret.
Click Create.

Remove a Personio connection

Deleting a Personio connection from your Okta Workflows Console doesn't delete the corresponding API credential. Delete the API credential directly through your Personio console.