Please note: These Account Hierarchy User Guides are for our customers who have Account Hierarchy Management enabled. If your account is not yet using this feature, please refer to our Checkr Dashboard User Guides.

The Account Settings page allows admins to manage their Checkr account and individual users to manage their account settings. Use this page to:

• Define email addresses for notifications
• Set notification preferences
• Add new users to the account
• Add and edit user permissions
• Add and edit payment information
• View and configure SSO settings
• Add and manage API keys and account webhooks
• Review partner integrations
• Create Brands
• Define a simple Account Hierarchy

Note: You may see different options than those described here depending on your Checkr user permissions. If you do not have access to an option you need, please contact your Checkr Customer Success representative for more information.

Settings

Use the Account Settings > Settings tab to edit account settings for your organization and select email notification preferences at the user level.

Enter your Company information

Checkr will populate these fields while enabling your account.

• Company name: This name will appear in any candidate-facing emails issued from this account, as well as in the Candidate Portal for your candidates.
• URI name: This slug will be used in the links for your candidates page.
• Account Logo: This image will be used in candidate-facing emails.

Define email addresses for notifications

As part of the background check process, Checkr issues multiple email notifications to candidates. Use the Account Settings section of the Settings tab to define these email addresses.

Note: Email addresses must link to your company and may link to a shared email account, allowing multiple people within your company to monitor and respond to these requests and replies.

Enter an address for the following fields:

• Support email: Enter the address that will be provided to candidates to contact you to supply evidence of rehabilitation or other context during the Adverse Action process.
• Support phone: Enter the phone number that will be provided to candidates to contact you during the Adverse Action process.
• Billing email: Enter the address that will be used by Checkr to contact you about invoices and other billing communications.
• Adverse action email: Enter the address to be used to send pre- and post- Adverse Action notices on your behalf to candidates. This address will receive the undeliverable notices produced if an Adverse Action notice isn't deliverable to a candidate (if their email account has expired, or if the email address on file is inaccurate).
• Technical Contact email: If your company uses the Checkr APIs for integration, enter your main point of contact for technical communications. Checkr will use this email address to contact you if there are any important issues or updates to the Checkr APIs.
• Compliance Contact email: Enter the main point of contact to communicate with Checkr about compliance issues or updates. Checkr will use this email address to inform you of updates to candidate disputes, or if changes have been made to background check Reports.

Adverse Action fallback

If your Adverse Action email address is invalid, Checkr will attempt to notify you using the following sequence of email addresses defined in the Account Settings section of the Settings tab.

1. User email for the account that initiated the Adverse Action
2. Adverse Action email
3. Support email
4. Billing email
5. Technical Contact email

If no email address exists at the account level, the email notifying your company that the Adverse Action email is undeliverable will be sent to the listed email address for ALL users on the Checkr account with admin permission level or above. 

Set notification preferences

Use the Your Email Preferences section in the Settings tab to select the content and frequency of your automated email notifications. This section of the page is available to all users within your Checkr account.

The following notifications are available:

• All report updates: Receive an email for any changes to report status.
• Report created: Receive an email each time a new background Report is created.
• Report clear: Receive an email when a Report completes with a Clear status.
• Report consider: Receive an email when a Report completes with a Consider status, indicating that there is something on the Report for you to review.
• Report suspended: Receive an email when a Report is Suspended, meaning that Checkr contacted the candidate to provide additional information, but the candidate has not yet responded.
• Report disputed: Receive an email when a Report is Disputed, meaning a candidate has contacted Checkr to contest the accuracy of a Report. Checkr will initiate a re-investigation for these candidates. At least one user on your account must be subscribed at all times to receive these notices.
• All candidate updates: Receive an an email when a candidate invitation is sent or expires.
• Candidate invitation expired: Receive an email when an invitation has expired because the candidate did not complete the process within 7 days (or within your custom time period).
• Candidate invitation sent: Receive an email each time an invitation is sent to a candidate.
• All Candidate Stories: Receive an email every time a Candidate Story is submitted.
• Candidate stories submitted pre/post AA: Receive an email if a candidate story is submitted before an Adverse Action is initiated, or after the Pre-Adverse Action notice has been sent.

Users

Use the Users tab to view, edit, manage, or delete existing users, or to invite new users to your Checkr account.

Note: Best practices suggest that you maintain at least 2 admin accounts for your organization. If there is only one admin account, and if that person leaves your company unexpectedly, no one will be able to access the Checkr Dashboard and manage your account.

If there is no admin on the account, contact Checkr Customer Success to create an admin user account. 

Invite new users

To add a user, enter their email address in the Enter email field and click Add User. Checkr will send an invitation to the user to confirm the new account creation and set up a password.

Note: Checkr cannot add users to your account. Please be certain to create more than one Admin user for the account to protect against unexpected changes within your company.

Assign roles to users

Click Edit in the Roles column to assign roles to your users, and grant them permissions within the Checkr Dashboard.

Individual users may have multiple Roles (such as Adjudicator AND Requester.

Available user roles

• Limited User: Can view the Candidates list. Cannot see candidate or report details. This role is automatically assigned to all new users on an Account.
  
• Requester: Can access, send, monitor, and cancel invitations to initiate background checks. This role can add a screening to an existing package. This role can see the status of reports in the Candidates page, but cannot see the results of completed reports. This role can also see candidate documents and exceptions, but cannot see completed report details. Assign this role to recruiters who initiate background checks.
• Adjudicator: Can see candidate and report details. This role can adjudicate Reports, engage candidates, and send Pre-Adverse Action notices to candidates. Assign this role to adjudication staff.
• Restricted Admin: Available for Account Hierarchy enabled accounts only, this role has all permissions of Adjudicators and Requesters for candidates in their Account Hierarchy node. This role can invite users to the account, and assign non-Admin user roles. This role can add a screening to an existing package and rename/save the package for future orders. This role can also view invoices and change developer settings. This role cannot update billing or settings. Assign this role to administrators for sub-nodes on your account.
• Admin: Has full access to all functionality within the Checkr Dashboard. This role can update account settings (including billing information), assign all roles to any users in the account. Admins are not restricted by the nodes assigned to them. Limit this role to core members of your team.

Note: For security purposes, Checkr cannot adjust user permissions. Please contact the admin on your team to edit or add user roles for an account. By default, the first user on an account will always be an admin.

Assign nodes to users

Assign nodes to users to restrict their access to reports included in that node. Use this feature to streamline and manage your users’ account access. For example, nodes may be used to limit visible PII for specific users, manage adjudication loads across multiple groups, or define access to candidate data.

Note: This option is available only for those accounts with node-based restriction enabled. Work with your Checkr Customer Success agent to enable this for your account.

To use nodes to restrict user permissions:

• Select Assign Nodes from the pulldown menu.
• Use the options to select nodes to assign to or un-assign from the user.
• Review your selection, and click Yes to confirm.

For more information on the options available in this modal, see Assign Nodes to Packages in the Home page of the User Guide. 

Delete users

To delete existing users from your account, simply click the red trash button next to their name. Checkr will issue a confirmation and then delete the user from your account.

Unlock user accounts

Users with too many failed login attempts will be locked out of their account. Click Unlock User from the pulldown menu at the right of their name to send users a password reset email.

Payment

Account Settings > Payment allows you to add or edit payment information, which may be either a bank account or a credit card.

Add bank account information

To allow Checkr to process invoices through a linked banking account (Automated Clearing House account), enter the following information:

• Account Holder’s Name
• Routing Number
• Account Number

After your account information has been saved, you will receive a set of micro-deposits to your bank account within 2-4 business days. Enter both deposit amounts in the Payments tab of the Account Settings page to verify your bank account. If your bank account is not verified with these deposits, Checkr cannot process payment.

Add credit card information

To allow Checkr to process invoices through a linked credit card account, enter the following information:

• Credit Card Holder’s Name
• Card Number
• CVC
• Expiration

Single Sign On

Use the Checkr Dashboard to view and update your SSO settings. Log into your account as a user with the Checkr admin role. Then, go to Account Settings > Single Sign On.

Copy your Checkr info into your IdP SAML config

Copy and paste the listed values into your IdP endpoint setup.

• Strategy: SAML
• Single Sign On URL: Copy into the ACS URL field in your IdP’s SAML config. 
• Audience: Copy into the SP Entity ID field in your IdP’s SAML config. 
• Attributes: `email` Configure your IdP to send the email address for a user as the SAML Subject. (If you are setting up SP-initiated SSO, you must make sure that all emails sent via this attribute match the domain specified on the Checkr Dashboard under Email Domain.) 
• Subject:NameID: Your IdP’s UUID or GUID.

Copy your SAML info into your Checkr setup

Use the following section to enter the required information.

• Sign in URL: The IdP callback endpoint (IdP URL) from your IdP platform’s SAML configuration. (Required for both IdP-initiated and SP-initiated SSO.) 
• Email domain: Enter your email domain. All traffic within Checkr for users with this email domain will be directed to your SSO endpoint. This setting disables Checkr direct login. (Required only for Service Provider initiated SSO.) 
• Note: Enabling this forces SP-Initiated SSO. Make sure that you’ve tested IdP-initiated SSO and make sure you meet the criteria to enable SP-enabled SSO before enabling!
• Signing certificate: Click Choose File to upload a signing certificate from your SAML provider to your Checkr account. Your IdP will use this public certificate to sign the assertion. (Your IdP Public Key (IdP Certificate) from your IdP platform’s SAML configuration.)

Developer settings

The Developer Settings page provides access to your account’s API keys and Webhooks. API keys are used to enable API access to the Checkr service for customized interfaces. Webhooks provide account level Webhooks to which any Checkr-generated events will be posted.

API and Webhook logs are displayed in the Logs section of the Checkr Dashboard.

For more information on Webhooks, see the Checkr API Guide. 

API Keys

The API Keys pane lists all active API keys for the account:

• Click Show key to see the selected key in plain text.
• Click Expire key to set an expiration date for the selected key.
• Click Create new key to create new Live Secrets, Test Secrets, Live Publishable Tokens, or Test Publishable Tokens.

By default, Customers are provided test API keys when their account is created. You will not gain access to production keys until Checkr credentials your account for production API access. Once your account is credentialed, go to Account Settings > Developer Settings to create and manage your API keys.

Use Test Secrets and Tokens while testing your integration. Test API calls are free, and will return fake data. When you’re ready, work with Checkr Customer Success to generate production Secrets and Tokens, and go live with your integration.

Account Webhooks

Use account webhooks to receive updates on objects created with the API. You must create webhook endpoints and add them in the Checkr dashboard to get status updates. You may create 2 endpoints within the test, and 2 within the live environment.

Attempts to create more than 2 endpoints within either environment will result in a "Quota limit exceeded" error.

For more information, please see Webhooks in the Checkr API documentation.

The Account Webhooks section lists existing and allows you to create new webhooks.

To add a new webhook for your account:

1. Enter a URL.

• HTTP, HTTPS, and AWS SNS schemes are supported.
• HTTP can be added only for Test environment webhooks.
• HTTP and HTTPS endpoints must be publicly accessible.
• AWS SNS endpoint must follow the format:
  `sns://<key_id>:<access_key>@<region>/<topic_owner>/<topic_name>`

1. Select an environment: Live or Test.
2. Choose to Include related object in payload, if desired.
3. Click +Add to create the new webhook.

To acknowledge receipt of a webhook, your endpoint should return a 2xx HTTP status code. Any other information returned in the response headers or response body is ignored.

If a webhook is not successfully received for any reason, Checkr will continue trying to send it every minute for 10 minutes, then every hour for 24 hours.

Monitor webhook logs in the Logs page, under the Webhook Logs tab.

Note: These are account-level webhooks and are not meant to be used for existing partner or OAuth integrations. Please contact Checkr Customer Success to update webhook URLs for a Partner integration.

Once webhooks are created, subscribe to the updates you wish to receive. For more information on available subscriptions, please see Webhooks in the Checkr API documentation.

Integrations

Use the Integrations page to view and manage your Partner integrations.

Any Partner integrations you have enabled for your account will appear on this tab. Click Turn off to disable the integration for your Account. Reach out to your Checkr Customer Success Manager for more information.

Create Brands

Brands allow you to customize candidate messaging by node. Creating a Brand, and assigning it to a node in your hierarchy, will apply that brand’s logo and URL to any emails issued to candidates associated with that node. This branding will also appear on the apply-flow screens for these candidates.

This allows you to provide a candidate experience that more clearly reflects their specific application.
When issuing invitations to candidates from an Account Hierarchy enabled account, the selected node’s brand will be used both for the email and for the apply flow screens. If the node does not have a brand associated with it, then the Account’s Hierarchy tree will be traversed upwards until a node with an assigned Brand is found. If there are no nodes assigned to a Brand, then the top level account fields will be used.

Map Brands to your hierarchy’s nodes. Accounts may have multiple Brands.

Once created and assigned nodes, Brands will automatically be applied to any candidate invitations issuing from your account.

Create a Brand

Use the Account Settings > Brands tab to create Brands for your account.

To create a Brand:

• Enter a name.
• Enter the website for the Brand.
• Upload a logo, and click Add Brand. (Checkr accepts all file types, and suggests a minimum size of 160x160pixels.)

Your brand will be created and added to the Manage Brands panel at the bottom of the page.

Note: While name is the only required field for a Brand, Brands without websites or logos will not be reflected in your candidate communications.

Assign nodes to brands

Assign nodes to Brands to customize candidate communications by nodes in your account.

To assign a node to a Brand:

• From the Manage Brands list, click Assign Nodes.
• Use the window that opens to select nodes for your Brand, and click Save.
• Confirm your selection, and the node will be assigned to the Brand.

Account Hierarchy

The Account Hierarchy page allows customers with simple account structures (fewer than 150 nodes) to create and manage their Account Hierarchy.

Note: Hierarchies that include nodes with parent-child relationships will not be displayed in the dashboard.

Add nodes to your Account

Nodes are individual entities within your Checkr account. Nodes can be assigned to Packages, PAM, Brands, and Users inside of the Checkr Dashboard.

Nodes may be used to assign account objects and restrict users. This model can be used to match your company's hierarchy (a node = an office) or more abstractly (a node = a position). Node IDs are defined by the user, so the associations made inside of Checkr (such as assigning a node to a Package) are kept even when the hierarchy changes. This provides a highly flexible means of integrating Checkr into your existing hierarchies and operations.

Use nodes to structure your account into multiple individual working units, which represent your business with respect to your hiring and background check needs.

Once defined, nodes may be used to manage the relationship of your Packages and other account settings to users and candidates within your Account. Once defined, use the Checkr Dashboard to assign nodes to users, Packages, your Adjudication Matrix, and other aspects of your Checkr Account.

Note: Once a hierarchy has been submitted, you must maintain at least one node on your account. A single remaining node in your Account Hierarchy may be edited, but it cannot be deleted.

To add nodes:

• Click Add Row.
• Enter a Name and a Custom ID for the node.
• Select a Tier (your custom label for this level in your hierarchy).
• Select a Parent node. (If no Parent is selected, the node will be placed at the top level of your hierarchy.)
• Click Submit Hierarchy.