Connecting Rippling to Windmill
Before you connect Rippling!
Heads up: Rippling controls access to Windmill. After connecting, you must assign access in Rippling → Windmill → Assignments. For pilots, choose Assign Individuals (yourself/admins).
Do not select Rippling's "recommendation to add all employees, this will send Windmill invites to everyone in your organization.
This guide shows you how to connect Rippling to Windmill, sync your org chart, and safely provision access—especially for pilots—without accidentally de-provisioning yourself or your team.
What you need before connecting
Admin access required in Rippling and Windmill.
Decide your rollout: Pilot (recommended) = provision yourself/admins only first; Full rollout later.
The recommended flow (Pilot → Rollout)
Install & authorize
In Rippling → App Store, find Windmill and click Install.
Complete the authorization (OAuth) pop-up from Windmill to connect the accounts.
You may be redirected back to Windmill after auth—this does not finish access assignment. Continue with Step 2.
Assign who gets Windmill (start with yourself/admins)
In Rippling → Windmill app → Settings/Assignments:
Assign Individuals → select yourself (and optionally a small admin/pilot group).
Do NOT select broad groups like “Everyone” or “Everyone except contractors” for a pilot.
Optional: create a Rippling group called “Windmill Access” and add only pilot users.
Save assignments. Rippling will provision those users to Windmill.
3) Verify in Windmill
In Windmill → Integrations → Rippling, confirm the connection status.
Your org chart will sync even if only you/admins are provisioned.
You do not need to provision the entire company to sync the org chart.
Initial syncs can take time (expect a short delay).
4) Roll out to more users
When ready, in Rippling Assignments, add additional individuals or switch to a broader group.
Avoid removing your own access while changing assignments.
Critical do’s & don’ts (read this ☑️ box)
Do
✅ Start with Assign Individuals (yourself + admins) for pilots.
✅ Keep provisioning in Rippling; treat Windmill invites as off while Rippling is connected.
✅ Use a dedicated group (e.g., Windmill Access) for controlled rollouts.
✅ Confirm connection in Windmill → Integrations after auth.
Don’t
❌ Don’t choose “Everyone” or “Everyone except contractors” for a pilot. This will send all of your employees invites to Windmill.
❌ Don’t assume you’re “done” after OAuth—you must set Assignments in Rippling. If you are not personally provisioned, you (even as an admin) will lose access to your Windmill account.
❌ Don’t de-provision yourself; you’ll lock yourself out of Windmill.
FAQ / Troubleshooting
I connected Rippling but no one can log in.
You likely didn’t complete Assignments in Rippling. Go to Rippling → Windmill → Assignments and add yourself/admins.
We only want org chart sync right now. Do we need to provision everyone?
No. Provision just yourself/admins; org chart still syncs.
We accidentally removed access / I kicked myself out.
Ask another Rippling admin to re-assign you to Windmill in Assignments, or contact support.
Can I invite users from within Windmill while Rippling is connected?
Treat Rippling as the source of truth for access. Do not mix manual invites with Rippling provisioning during rollout.
Admin checklist (quick version)
Install Windmill from Rippling App Store and complete OAuth
In Rippling → Windmill → Assignments, Assign Individuals (yourself + admins)
Verify connection in Windmill → Integrations (org chart sync begins)
Run a small pilot; confirm Slack/Google connections and routines
Roll out to a broader group via Rippling Assignments when ready
User Provisioning Options in Rippling
⚠️⚠️⚠️ Everyone except contractors should have an account: If you select this option, you will automatically send all non-contractors in your organization an invite to Windmill. While Rippling recommends this option, it is actually not recommended for Windmill Pilots.
⚠️⚠️⚠️ Everyone including contractors should have an account: This will invite all employees and contractors. This should not be selected unless you intend on rolling out Windmill to your full organization.
⭐⭐⭐ Don't create accounts; I will manually select who should have an account: This is the recommended Windmill option. This will let you add users to Windmill after Ripping has been connected.
Set up rules for who should have an account: This will allow you to configure custom rules within Rippling.
Loom Resources
In order to use Rippling a Windmill Admin must set up the Rippling connection before users can authenticate with this method. Here is a quick walkthrough of the Rippling setup.
How do we provision users through Rippling?
Once Rippling is connected, you need to ensure that your team members have the proper provisioning access within Rippling. Here is a quick walkthrough of how to ensure that is configured properly.
With Rippling connected, you can no longer manage your Org through Windmill, all edits, invites and changes need to be made through Rippling.