Sterling

Record your Sterling connection as background check providers evidence. Automated collection is not available for this provider yet.

Connect with an API token

1. In Sterling:

   1. Obtain API credentials from First Advantage (Sterling is a First Advantage company); they are not provided through the API or a self-service screen. You receive a client_id and client_secret, and the credentials differ by region and environment.
   2. Integration credentials and Production credentials differ, so obtain a separate set from First Advantage for Production when you go live.
   3. To get a bearer token, POST to the region's oauth endpoint (for example https://api.us.sterlingcheck.app/v2/oauth) with Authorization: Basic base64(client_id:client_secret) and grant_type=client_credentials. The returned token expires (expires_in 3600 seconds) and is sent as Authorization: Bearer.

   Where to find the other values:

   • Base URL (optional): The regional API host from the Sterling API docs: US https://api.us.sterlingcheck.app (Integration: https://api.us.int.sterlingcheck.app), EMEA https://api.eu.sterlingcheck.app, Canada https://api.ca.sterlingcheck.app, APAC https://api.au.sterlingcheck.app.

   Sterling issues this credential through its API or its support team, not through its admin screens.

   Sterling is now a First Advantage company. The API docs portal is script-rendered; its content was read from the portal's own collection JSON on apidocs.sterlingcheck.app. The docs say the credentials 'are not provided through the API and must be obtained through First Advantage'. EMEA, Canada and APAC are supported only in Production. The client secret changes only at your request. The docs define no read-only scope: the credential gives access to the packages and screenings on the client account. Prospects can use the 'Request a Developer Key' form on the Sterling API page instead.

   Source: sterlingcheck.com, apidocs.sterlingcheck.app, apidocs.sterlingcheck.app, checked 2026-10-07.

2. On Compliance › Connectors, open Sterling, click Connect, choose API token and fill in:

   Field	What to enter
   API token / Personal access token	Required. Stored encrypted and never shown again.
   Base URL (optional)	—
   Account / Org / Workspace (optional)	—

3. Click Connect with token.

Frameworks

No automated compliance test reads Sterling yet, so no framework lists it. How connectors provide evidence for frameworks: Frameworks and connectors.

Related

• Background Check Providers connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks