Authentication Troubleshooting

Last updated: December 16, 2025

Each payroll provider handles authentication differently, and plan sponsors may encounter occasional issues when connecting through Finch Connect.

This guide outlines the most common errors, their causes, and how to resolve them.

If you don’t find a solution here, please contact developers@tryfinch.com with:

  • The company name

  • A description of the issue

  • Any relevant screenshots or error messages

You can also CC developers@tryfinch.com in an email thread with your plan sponsor to loop in our technical support team directly.

Finch Connect link does not open

If the plan sponsor reports that the Finch Connect link isn’t opening, try the following steps:

  1. Click the link yourself to confirm whether it opens.

  2. Ask the plan sponsor to copy and paste the link directly into their browser instead of clicking.

  3. Check that a pop-up blocker isn’t preventing the Finch Connect modal from opening.

  4. Try another browser (Chrome, Edge, or Safari recommended).

  5. If the issue persists, email developers@tryfinch.com with the sponsor’s name and a brief description of what happens when they click the link.

“Insufficient permissions” error

Finch Connect requires the user to have administrator-level access in their payroll system to authorize data sharing. If the plan sponsor receives a permissions error, confirm that they hold one of the following roles:

Provider

Required Role / Permission

Notes

ADP Run

Owner role

Confirm permissions here.

ADP Workforce Now

Admin who can create a new user and assign the Standard Practitioner role

ADP WFN Cloud is not supported

Insperity

Employee Administrator with required permissions

Confirm permissions here.

Justworks

Administrator with required permissions

Confirm permissions here.

Paychex Flex

Super Admin

Confirm permissions here.

Paycom

User with permission to manage employee data and payroll settings

Confirm permissions here.

Paylocity

Company Administrator

Confirm permissions here.

Note: Paylocity uses custom admin labels. If a sponsor has admin access but sees an error, send the role and company name to developers@tryfinch.com

for help.

QuickBooks Online

Primary Admin or Company Admin

Confirm permissions here.

Note: There must be an available User or Accountant seat before connecting.

Sequoia One

Admin with specific permissions

Confirm permissions here.

The link has expired

You can refresh the expiration date at anytime from the Finch Dashboard to add another 90 days. Click on any Stage Connection, click on the blue Actions button and select "Refresh Connect link".

Screenshot 2025-12-15 at 7.27.17 PM.png

Connection Status is "Reauth" - Generate a Re-authentication Link

If you only need annual census data AND the Last Synced date is after January 1 of the current year, then no action is needed at this time. For most connections, if the data has synced on January 1 or later of the current year, then all the data from the previous year has been pulled into our system.

If you do determine that the data is not complete, you can generate a re-authentication link from your dashboard to send to the plan sponsor. Do not make a new connect session as that will require you to redo the mapping and add another billable connection.

Click on any Live link in the dashboard, then select the blue Actions button and select "Create a Re-authentication Connect Link".

Screenshot 2025-12-15 at 7.25.34 PM.png

Investigating Failed Authentications

To see detailed information about why an authentication failed for a Staged Connection or a Live connection

  1. Select the live connection or the staged session.

  2. Select "Session History".

  3. Click on the session to open the side bar details

  4. Click on Session Events to see any errors.

  5. If the errors message on the events is not actionable, please email developers@tryfinch.com with the session id (click on session details in the side bar) and the error message.

ADP Run authentication errors

Some versions of ADP Run are not compatible with Finch. You can share

📄 How to Verify Your ADP Run Account is Compatible with your plan sponsors to help them determine if they have a compatible version.