IRIS HR

Set up IRIS HR for automated tests with TrustCloud

TrustCloud’s API-based integrations map seamlessly to your frameworks and controls to power automated evidence collection, continuous monitoring, and predictive risk analysis. Let’s explore how you can set up this integration for automated tests.

By granting TrustCloud limited access to metadata through a service principal account, you can ensure that your systems remain compliant with your adopted controls. TrustCloud’s focus on trust, security, and simplifying compliance makes it a valuable asset in the GRC landscape.

Read our GRC Launchpad article: Integrations to learn more.

Explore 100+ evidence collection integrations to power evidence collection and real-time risk analysis.

Purpose

Once you set up your compliance program, TrustOps works to ensure that your systems remain compliant with your adopted controls. To do so, TrustCloud runs automated tests against systems in your product and business stack and verifies that they are properly configured.

This document outlines the steps you can take to grant TrustCloud access to only read metadata about the configuration settings for your IRIS HR account so that TrustOps can validate and generate evidence for your compliance program.

Instructions to grant TrustCloud limited access to IRIS HR

The API allows you to integrate with IRIS HR via OAuth2, which requires you to get the OAuth Client ID and Client Secret. The credentials can be obtained by reaching out to your IRIS HR Account Executive. The credentials will be shared with you over email by the IRIS HR team.

Once available, you need to provide the ‘Client ID’ & ‘Client Secret’ into TrustOps to integrate.

Additional Information

For additional information, you can refer to the Iris HR documentation to better understand how the access mechanism works.