Discussions

Hello,

since Personio's UI makes people click a lot when requesting / recording certain kinds of absence, I'd like to build some tooling.

As far as I understand, I need to obtain an API key and register an application, and also the API key gives the application I would build on my end very wide-ranging abililties (e.g., it would be able to file absence requests for everyone). If the tooling should work for individuals, I'd have to make sure only requests for the person at hand could be filed.

I believe I should implement some kind of user management on my end. We have wired up Personio via Google Workspace SSO, so if I ensure people have to log in to our tool via SSO and then file requests only for the logged-in user after retrieving their ID from Personio, would that be good enough?

What would be a best practice for that? I'll appreciate any pointer to past experience and/or documentation.

Michael