Integrating SailPoint with Recruitee
Recruitee (Tellent Recruitee) is a cloud-based applicant tracking system (ATS) used by organizations to publish job offers, collect and manage candidates through hiring pipelines, and coordinate the work of internal team members across jobs, departments, and locations. Recruitee exposes two public APIs - the Careers Site API (candidate-facing, job listings and applications) and the ATS API (admin-facing, scoped per company). The SailPoint Recruitee connector integrates with the ATS API only. This document provides the instructions required to configure a new direct connection between SailPoint and Recruitee. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.
Note
To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.
Supported Features
The Recruitee connector supports the following:
Account Management
- Aggregate Account (Admins - Recruitee members)
Entitlement Management
- Aggregate Roles
Important
Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
- Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
- Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.
These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.
Prerequisites
Before configuring the Recruitee connector, ensure the following requirements are met:
- Sign in to Recruitee with a user whose hiring role permits viewing team members and hiring roles (see Required Permissions below). The API token inherits exactly the permissions of the user who generates it.
- Go to Settings > Apps and plugins > API tokens > Personal API tokens.
- Select + New token (also labeled Add new token) in the top-right corner and provide a token label for easier distinguishing, then select Save.
- If prompted, re-enter your account password to verify your identity. Recruitee requires re-authentication every 3 minutes during this flow.
- Select Show token and copy the generated API Token. Only the token owner can view it - not even an account administrator can see another user's tokens.
- Note your Company ID, which is displayed on the same Personal API tokens page.
- Copy and securely store the following details, which are required during connector configuration:
- Base URL
- API Token
- Company Id
Note
- Recruitee API tokens are personal, and issued per user and per company - not company-wide. A token created while signed in to company A cannot be used for company B, and it grants exactly the same scope of actions the generating user has in the web or mobile application. It is not possible to raise or lower the access level of a token, or to disable token generation for a role.
- Because the token is personal, removing that user from your company restricts their tokens' access to your company, and any integration built on their token stops working due to lack of authorization. Use a dedicated service/role-based account rather than a named individual wherever possible.
- Tokens do not expire unless revoked. Revoked tokens cannot be regenerated - a new token must be created and reconfigured in the source. After revocation, every authenticated request returns
401 Unauthorized. - A rate limit of 1,000 requests per minute applies per API token.
For more detailed information on obtaining an API token, refer to the official Recruitee documentation: Recruitee API getting started.
Note
The linked document is not maintained by SailPoint and is subject to change without notice.
Required Permissions
Typical Roles That Can Generate Tokens
Recruitee ships six default hiring roles, managed under Settings > General > Hiring roles, and additional custom roles can be created by duplicating an existing role or starting from scratch. Because an API token carries exactly the permission scope of the user who created it, the effective connector permissions are the hiring-role permissions of that user.
- Administrator - Recommended. Administrators have access to all candidates, jobs, and settings, and can fully manage the company's account and members, including inviting and deleting other administrators. This role is not editable in Recruitee. An Administrator token satisfies the read access the connector requires for team members and hiring roles.
- Custom roles - Users with the Company > Manage team members and roles permission can create roles and assign permissions.