Harvest v3 partner integrations use OAuth 2.0 authentication to provide secure, permissioned access to your organization’s data. These integrations allow approved partners to take specific actions in Greenhouse on behalf of your organization.
Start the connection
The connection process begins when the OAuth flow is launched. This may be initiated in two ways:
- From the partner’s product: Most partners will include a button such as Connect with Greenhouse inside their application. Clicking this launches the OAuth flow.
- From the Greenhouse Integrations page: Some integrations can be found by selecting Integrations from the top navigation bar, then searching for the partner in the marketplace.
Note: Not all integrations listed in the marketplace use Harvest v3. The partner determines where the connection starts and whether a Site Admin or a standard user should complete setup. Always follow the partner’s instructions.
Review requested permissions and log in
When the OAuth flow launches, Greenhouse displays the specific actions the partner integration is requesting permission to perform with your organization’s data.
After reviewing the requested permissions, Log in to Greenhouse with your credentials to continue.
Choose an authorization method
After logging in, you'll see the requested permissions again and a checkbox for how to authorize this integration.
There are two authorization methods:
- Authorize using a service account: Creates an organization-level service user account that owns the authorization. The account has no username or password and persists until disconnected by a permissioned user. Actions appear in Greenhouse as performed by the service account.
Note: This option is available only if the authorizing user is a Site Admin.
- Authorize without a service account: Links the authorization to the individual user’s account. Actions taken by the integration appear as if they were performed by that user.
We recommend confirming with the partner which authorization method is best for their integration.
Manage or revoke access
Once authorized, connected integrations appear on the Connected Integrations page. To access this page, click on the Configure icon on your navigation bar, then click Dev Center on the left.
Click Connected integrations.
From here, you'll see all your OAuth-connected integrations and the following info:
- Integration name — the name of the partner integration.
- Connected by — the user or service account that authorized the integration.
- Connected on — the date when the integration was connected.
From the Connected Integrations table, permissioned users can open the integration’s details page by clicking the integration name or selecting View details from the ellipsis (…) menu. The ellipsis menu may also include other available actions, such as Disconnect, depending on the integration.
On the view details page, users can:
- Review integration information and authorized permissions.
- View which account was used to connect the integration.
- Disconnect the integration to revoke access.
Note: Disconnecting immediately revokes access, but the same user can reconnect later by repeating the OAuth flow.