Integrate with Rippling using SCIM and the App Shop integration framework

Steps

1. To list your application in the Rippling App Shop, apply through Rippling's developer portal; you'll receive an app client ID and secret along with integration documentation.
2. Rippling uses OAuth 2.0 for authorization; redirect users to Rippling's OAuth endpoint and request the relevant scopes (e.g., 'employees:read', 'groups:read') based on your integration's requirements.
3. Exchange the authorization code for a bearer token; tokens are scoped to the specific Rippling company that authorized your app — store per-company tokens rather than treating them as shared credentials.
4. For SCIM user provisioning, navigate in Rippling to IT Management > Apps > your app > Provisioning to generate a SCIM base URL and bearer token; Rippling acts as the SCIM identity provider pushing user lifecycle events to your endpoint.
5. Implement SCIM 2.0 server endpoints in your application: POST /Users (create), PATCH /Users/{id} (update), DELETE /Users/{id} (deprovision); Rippling calls these when employees are hired, changed, or terminated.
6. For reading HR data, use the Rippling REST API at https://api.rippling.com/platform/api/; GET /employees returns active employees for the authorized company with fields like name, department, start_date, and employment_type.