Marketplace partner integrations

Documentation for approved HiBob Marketplace partners building OAuth app integrations via the Developer Portal

🚧

Before you begin — Partner OAuth integrations only

These guides assume your company is already a Bob Tech Partner with Developer Portal access and OAuth credentials.

  • If you are not yet a partner, first submit the partner application form. Once approved, you will sign the Terms and Conditions, receive a Bob account, and then receive an invitation to the Developer Portal, where you can add your apps.
  • Bob customers building integrations for their own company should use Service Users and Authorization, not OAuth.
  • OAuth app installation, Developer Portal access, and partner webhook behavior are not available to general Public API users.

Overview

This section is for partners who build Marketplace apps that customers install via OAuth. It covers the Developer Portal workflow and partner-specific webhook delivery.

OAuth reference material (authorization protocol, token exchange, refresh) lives under Core concepts for partners (OAuth only) in the API Reference.

Implementation guides for multi-tenant installations, user flows, and uninstall are in this Marketplace partner integrations section below.

If you are a Bob customer integrating with your own Bob account, start with Getting started with Bob's API and API Service Users.

Partner journey

  1. Quick start guide — become a partner if needed, create your app in the Developer Portal, configure OAuth, scopes, and webhooks, complete marketing listing content (Overview and About), prepare the technical package, and submit for separate listing and technical reviews. Security Review follows a separate timeline (mandatory before go-live for Payroll and Global Payroll).
  2. Test apps in Bob Marketplace (Dev mode) — in Bob, open Bob products > Marketplace > Manage apps > In development to see your Developer Portal apps (Dev mode) on your partner company.
  3. OAuth 2.0 — authorization code flow, token exchange, refresh, and development uninstall (API Reference).
  4. Scopes mapping to endpoints — choose the minimum scopes your app needs.
  5. Getting started with partner webhooks — delivery, retries, and routing events by companyId.
  6. Managing customer installations — multi-tenant model: link Bob companies to your customers, store tokens, track status.

Did this page help you?