Personio's authentication change on 1 December 2026: no action needed

Personio has announced that from 1 December 2026, API authentication requests to /v1/auth must send client_id and client_secret in the request body. Sending them as URL parameters will stop working.

This doesn't affect connections through Apideck, and neither you nor your customers need to do anything.

Apideck's Personio connector already sends client_id and client_secret in the request body. We changed this in June 2026, well before Personio's deadline. Existing Personio connections keep working after 1 December 2026 without being reconnected, and the API credentials don't need to change.

If your customers received Personio's notice and ask whether they need to act, you can tell them the answer is no.

• Personio: reading API v2 data through the Proxy API

• HRIS: why employees or fields are missing (without an error)

Contact Apideck support through the Customer Portal (the Requests link at the top of this help center), your Slack channel with us, or support@apideck.com if a Personio connection stops working.