--- title: How to Authenticate slug: 3nHm-how-to-authenticate description: Establish an ADP Workforce Now connector with our comprehensive guide, covering project setup, certificate requests, permissions management, and data synchronization steps. docTags: createdAt: 2025-10-10T12:13:19.000Z --- This guide walks you through the complete process of setting up an ADP Workforce Now connector, including creating the required ADP project, generating the client ID and secret, requesting a certificate, configuring the necessary permissions, and establishing the connection. ::Iframely{originalUrl="https://watchclueso.com/embed/bjoveguan9nn1dhg" embedUrl="https://watchclueso.com/embed/bjoveguan9nn1dhg" title="ADP Workforce Now Integration" html="
"} ## Before you start :::hint{type="info"} You will need: - **Admin access to ADP API Central** so you can create or manage an integration project, API access, credentials, and certificates. - **Admin access to ADP Workforce Now** so you can configure the integration profile and data permissions. - **The Bindbee magic link** shared with you by your integration provider. Keep the Client Secret and Private Key secure while completing the setup. ::: ## Connection setup ### Creating a Connector with ADP Workforce Now **Step 1:** Open the magic link provided. This will lead to a linking page. **Step 2:** Click on **Allow and Continue**. ::Image[]{src="https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/e4UpjI_MvNXew8K9icQeA_upload.png" size="50" width="539" height="735" isUploading="false" darkWidth="539" darkHeight="735" showCaption="false"} The next screen will ask you for an ADP **Client ID** and **Client Secret**. You need to create these in ADP API Central. ### Generating Client ID and Secret **Step 3: **Sign in to **ADP API Central**, then select **Create a Project**. ::Image[]{src="https://usercontent.us.prod.clueso.io/ebba768b-93c7-4a16-835c-91ebc7664eef/4f1b12fe-cb4d-465f-8a15-c5608c2a00a3/06657d67-1e6c-4a19-ba18-1aef92a4d907/images/48475e36-f18d-47e8-9003-006d0eb788e9.png" size="80" width="960" height="441" isUploading="false" darkWidth="960" darkHeight="441" showCaption="false"} **Step 4: **Enter a name and description that clearly identify the integration, then select **Next**. ![](https://usercontent.us.prod.clueso.io/ebba768b-93c7-4a16-835c-91ebc7664eef/4f1b12fe-cb4d-465f-8a15-c5608c2a00a3/06657d67-1e6c-4a19-ba18-1aef92a4d907/images/da93a27e-b27a-499b-80cd-78bd0325665d.png) **Step 5: **Select the use case that matches your integration requirements, then select **Create Project**. ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/g3PK1hFbzdB2F-auwm7ft_upload.png) **Step 6: **Once the project is created, select **View Project**. ![](https://usercontent.us.prod.clueso.io/ebba768b-93c7-4a16-835c-91ebc7664eef/4f1b12fe-cb4d-465f-8a15-c5608c2a00a3/06657d67-1e6c-4a19-ba18-1aef92a4d907/images/f7d4a48a-b7ba-422a-96e3-53272fcf7c84.png) :::hint{type="info"} **Important: confirm access to v2/workers:** Before continuing, confirm that the v2/workers API is included in the project. If it is missing, add it manually using the instructions in [Troubleshooting](docId:3nHmwQK2LpYKg229wIG8r). ::: **Step 7:** Scroll down, copy the client ID, and paste it in the Magic Link prompt. ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/wvZoazhqjCfsjEc_Lmmuh_upload.png) ::Image[]{src="https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/7KyPoYGr3BJtsna_dlcL1_upload.png" size="50" width="538" height="748" isUploading="false" darkWidth="538" darkHeight="748" showCaption="false"} **Step 8:** Click on **Show Secret** to reveal the client secret. Copy and paste it in the prompt. ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/KSOj2k-X2BQmks1_H_NRg_upload.png) ::Image[]{src="https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/XZG5dGM_mPwetW44_CwIB_upload.png" size="50" width="530" height="743" isUploading="false" darkWidth="530" darkHeight="743" showCaption="false"} **Step 9:** Click on **Next** to proceed. ### Requesting an ADP Certificate **Step 10:** You will now be prompted to enter the ADP certificate details. To obtain these, return to API Central. ::Image[]{src="https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/7VrkFcELt60tru5yQFByY_upload.png" size="50" width="532" height="746" isUploading="false" darkWidth="532" darkHeight="746" showCaption="false"} **Step 11:** Navigate to the certificate section and click on **Request Certificate**. ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/e6JpJWBhiYi-YVQ6iefJB_upload.png) ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/pDUIg34a4zFpMhfq4BMyf_upload.png) ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/ixTU0Ok5AJnVSnt5JW9rT_upload.png) **Step 12:** Enter the required details and click on **Next** to proceed to generate a Private Key. ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/r4Vb7EHtGkCjYmu9vVRwu_upload.png) **Step 13:** Copy the entire private key and paste the copied key in the prompt on the linking page. Also store the private key securely on your local machine. ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/Etj3AkFtpaRb-7rT8hL_7_upload.png) ::Image[]{src="https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/Q3haIUxrghMObZbbQNbez_upload.png" size="50" width="537" height="741" isUploading="false" darkWidth="537" darkHeight="741" showCaption="false"} **Step 14:** Click on **Next**. ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/99qnHef5ztd2Py2ik9WCM_upload.png) **Step 15:** Click on **Done** once the certificate starts being generated. ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/9BZs75vpsnxpbynf_AdNF_upload.png) **Step 16:** Click on View to open the certificate. Copy the certificate and paste it into the provided prompt. Download a copy and store it securely for future reference. ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/iBYjS5Jyze-nQEs_3gDPj_upload.png) ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/tr7ypRrK3FXPSyC5VzcqA_upload.png) ::Image[]{src="https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/oswsSzz8e57m_E70cMdhG_upload.png" size="50" width="533" height="745" isUploading="false" darkWidth="533" darkHeight="745" showCaption="false"} Leave this page open without refreshing it, and proceed directly to the next step to configure the required permissions. ### Setting Up Permissions **Step 17:** Navigate to **ADP Workforce Now** and log in. **Admin access** is required for this step. **Step 18:** Go to the **Setup** section and click on **Access Permissions**. ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/guKdkN4EXAsPTf7m-Rx4U_upload.png) ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/7P_-SdKqC1lI6Bo5bsGdh_upload.png) **Step 19:** Navigate to **Manage Profiles** and find the profile created for your API Central project. ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/qsSVJye0FW2C_S9A7kTif_upload.png) ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/uhZ9dVK-SJnKRiELwk1SS_upload.png) **Step 20:** Go to **Menus & Features** and assign appropriate permissions. Clear any permissions that are not required. ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/r-B1e5ja_Nk-3RN4sx1Yt_upload.png) **Step 21:** If the integration needs sensitive fields such as bank details, date of birth, Tax ID, deductions, accumulators, or compensation rates, open **Sensitive Personal Information** and configure the masking permissions. Use the following settings for data that needs to be available to the integration: | **Data** | **Recommended permission** | | ---------------------- | ------------------------------------ | | Bank Account & Routing | Partial masking with reveal and edit | | Birth Date | Partial masking with reveal and edit | | Tax ID | Partial masking with reveal and edit | | Accumulators | No masking | | Deductions | No masking | | Rate | No masking with edit | Only unmask data that your integration actually requires. ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/793e21CmejCD1z_zHDmBg_upload.png) Select **Save** after completing the permission setup. ### Complete the connection **Step 22:** Click on **Connect**. The connection should now be established. ::Image[]{src="https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/2db-MS11CSzMYXlkVS5NC_upload.png" size="50" width="531" height="742" isUploading="false" darkWidth="531" darkHeight="742" showCaption="false"} ::Image[]{src="https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/xQ1G8F3OEL4c0-XeFv0Ca_upload.png" size="50" width="532" height="748" isUploading="false" darkWidth="532" darkHeight="748" showCaption="false"} ## Troubleshooting If you receive the following error: :::BlockQuote 403: Invalid Credentials or Permission, please try again with correct credentials. ::: This usually indicates that the required API access has not been added to the API Central project. ### How to Resolve Please follow the steps below to verify and enable the required API access: 1. Go to **API Central**. 2. Open the relevant **project**. ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/IE0ghRt5juEU3zVXzquAY_.blob) - Navigate to the **APIs** **tab**. ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/FbNK4Qf_RX-Qyh4P4uIoS_.blob) - Click **Add APIs** or **Add More APIs**. - Search for: `v2/workers` - Select the API scopes shown in the image and click **Add**. ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/y-dx2RY3L_mOCD_dT9cye_.blob) - Click **Commit to Project** to save the changes. ![](https://api.archbee.com/api/optimize/LD5Xn2bifyanaRVQ-BE9T/mwGq_uRtNzEG9WWXcqo7a_.blob) Once this is done, try connecting again using the magic link. ## Frequently asked questions (FAQs) ### Can I add permissions after the connection is complete? Yes. You can add missing permissions or API scopes even after the connection has been set up. Once the permissions are updated for your ADP project, the newly accessible data will be reflected after the connector’s next sync. If needed, a manual sync can also be triggered to refresh the data sooner. ### Do I need an ADP API key? No API key is used in this setup. The Bindbee connection uses credentials generated through your ADP API Central project, including the **Client ID**, **Client Secret**, **Private Key**, and **Certificate**. ### Where do I find my ADP Client ID and Client Secret? Open the project in **ADP API Central**. The Client ID is shown in the project's credentials section. Select **Show Secret** to reveal the Client Secret. ### Do I need ADP administrator access? Yes. You need sufficient access to manage the project in **ADP API Central** and to configure **Access Permissions** in ADP Workforce Now. ### Why does ADP authenticate successfully but return only some data? Authentication and data access are separate. The API Central project determines which APIs are available, while the Workforce Now integration profile determines which data the integration can access. Sensitive-field masking can further restrict individual fields. ### Which ADP API access is required for employee data? The exact scope depends on the data being synced. For employee data in this setup, confirm that the project includes the required **v2/workers** API access. If Bindbee reports a scope or permission error for another ADP resource, the corresponding API may also need to be added to the project.