The Cornerstone OnDemand integration with Staffbase brings learning directly into the Employee App or Intranet. Set up your Cornerstone environment to enable the Cornerstone OnDemand integration. This includes creating a service account, assigning permissions, and configuring API access. Complete the setup to obtain the following details to add the learning integration in Staffbase.

• Service account User ID
• Base URL
• Client ID
• Client Secret
• Deep link URL

Prerequisites

• You have administrator access to Cornerstone.
• Access to Staffbase Studio (for webhook, if used)
• You have OAuth client DAEMON set up in Staffbase for Cornerstone.

1. Create a service account: In the Cornerstone environment, create a dedicated service account to retrieve and filter user data. Note the User ID. The integration uses this account instead of individual user credentials for the OAuth setup.
2. Define permissions: Create a security role that defines which data the integration can access. Search for the following permissions to allow access to user data and learning records, and add them.

• Transcript API - Request
• Reporting API - Read Only

3. Assign permissions to the service account: Link the service account to the security role either directly or via a user group.

   User groups are dynamic. Dynamic user groups automatically include users based on defined criteria (such as department or location), ensuring permissions are assigned and updated without manual effort.
4. Register an OAuth 2.0 application: Configure secure API access for the OAuth using:

• Application name (for example, Staffbase Integration)
• User ID (service account from Step 1)
• Select the required APIs and add the corresponding permissions:
  • Cornerstone API:
    • transcript:read
    • transcript:create:request
  • Reporting API: Read Only
    • obj_address_core:read
    • obj_culture_core:read
    • obj_currency_core:read
    • obj_curriculum_structure_core:read
    • obj_language_core:read
    • obj_ou_address_core:read
    • obj_timezone_core:read
    • obj_training_core:read
    • obj_training_ilt_facility_core:read
    • obj_training_local_core:read
    • obj_training_type_core:read
    • obj_training_type_local_core:read
    • obj_transcript_status_local_core:read
• Optionally, restrict access to the OAuth 2.0 application by adding your Staffbase domain to the domain list.

5. Collect the Oauth details: Copy the Client ID and Client Secret. 

   The client secret is only shown once. Store it securely.
6. Optionally, set up webhooks: Configure the webhooks to send notifications for newly assigned courses.
   1. Create a new endpoint with:
      • Endpoint URL: Your Staffbase URL with the webhook path (https://<your-Staffbase-domain>/api/cornerstone/notifications)
      • Authentication: Enable OAuth authentication
        • Use the OAuth client created in the Staffbase settings for the integration
        • Use the token URL from your Staffbase OAuth client
   2. Create new webhook:
      • Select:
        • Event category: Training
        • Event: Training Assigned
      • Assign the endpoint you just created in 6.1

You have set up access and permissions and collected the information needed to add the learning configuration in Staffbase.