OAuth 2
This guide explains OAuth 2.0 authentication with Factorial HR and the two token types available. For step-by-step setup with Postman examples, see the Company Token and User Token guides.
Prerequisites
Before starting, make sure you have:
- Admin access to Factorial HR
- Access to the correct environment: Production or Demo
- Postman access through browser or application
- For the user token: a user assigned a specified permissions group
How to choose your environment: Environments: Production and Demo
Understanding Token Types
🏢 Company Token
A Company Token provides company-wide access to Factorial data. All actions are performed on behalf of the company, not a specific user.
| Property | Details |
|---|---|
| Lifetime | Does not expire (but can be revoked) |
| Use case | Integrations that need full company data without user interaction |
| Permissions | Full access to all company data |
👤 User Token
A User Token provides user-scoped access. All actions are performed on behalf of a specific employee, and access is limited by that employee's permission group.
| Property | Details |
|---|---|
| Lifetime | 1 hour (requires refresh token to renew) |
| Use case | Integrations with restricted access, hiding sensitive data from third parties |
| Permissions | Limited to the employee's permission group |
Support
If you have any issues or questions about the API, don't hesitate to get in touch with our Tech Support team by filling out one of the following forms:
Updated 20 days ago