Safeguard Docs
Compliance ConnectorsSetup by categoryHRIS

Justworks

Connect Justworks to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.

Record your Justworks connection as hris evidence. Automated collection is not available for this provider yet.

CategoryHRIS
Connect withAPI token
What a connection producesConnection record

Connect with an API token

  1. In Justworks:

    1. Justworks has no personal API tokens. Its Public API uses OAuth 2.0 (Authorization Code Flow), and OAuth application creation is not self-service: an approved partner asks the Justworks team for an OAuth application, giving the redirect URI, requested scopes and application name, and receives a client_id and client_secret.
    2. A Justworks customer admin then authorizes that application from the partner's Connect to Justworks link. The partner exchanges the returned authorization code for an OAuth access token (with a refresh token), which is the bearer token used with the API.
    3. Request read-only scopes only, for example company.basic:read, member.basic:read and member.employment:read. Avoid sensitive ones such as company.bank_account:read, payroll:read or paystub:read unless needed.

    Where to find the other values:

    • Base URL (optional): The Public API base URL is https://public-api.justworks.com (endpoints under /v1).
    • Account / Org / Workspace (optional): Not a separate credential: the OAuth token is bound to the authorizing company, and GET /v1/company returns its details.

    Justworks issues this credential through its API or its support team, not through its admin screens.

    Access requires approved-partner status with Justworks. A customer cannot mint a token alone. The docs describe no UI path inside Justworks for creating credentials and don't say whether the client secret is shown once.

    Source: public-api.justworks.com, checked 2026-10-07.

  2. On Compliance › Connectors, open Justworks, click Connect, choose API token and fill in:

    FieldWhat to enter
    API token / Personal access tokenRequired. Stored encrypted and never shown again.
    Base URL (optional)—
    Account / Org / Workspace (optional)—
  3. Click Connect with token.

Frameworks

No automated compliance test reads Justworks yet, so no framework lists it. How connectors provide evidence for frameworks: Frameworks and connectors.

On this page