Connect Workday

Stay organized with collections Save and categorize content based on your preferences.

This page describes how to connect Workday to Agentspace Enterprise.

After you set up your data source and import data the first time, the data store syncs data from that source at a frequency that you select during setup.

Before you begin

Before you create a Workday connector, make sure you have the following:

• Client ID
• Client secret key
• Refresh token

These credentials are necessary for connection authentication.

Use the following steps to generate a client ID, secret key, and refresh token, create a new user in the Workday instance, assign them to a security group, and grant the necessary permissions.

1. Set up Workday and register API client in Workday

   To register an API client in Workday, do the following:

   1. Sign in to your Workday instance. For example, https://YOUR_INSTANCE_ID.workday.com/wday/authgwy/YOUR_TENANT/login.html

   2. In the search bar, search for Register API client.

   3. Click Register API client for integrations.

   4. In the Register API client form:

      1. Enter Client name.
      2. Set Client type to Authorization code grant.
      3. Set Access token type to Bearer.
      4. Provide Redirection URL.
      5. Set Refresh token timeout (in days).
      6. Add necessary Scopes (Functional area).
      7. Click Ok.

      

   Workday generates the following details:

   • Client ID
   • Workday REST API endpoint
   • Token endpoint
   • Authorization endpoint

2. Set permissions and roles for Workday user

   To set up an integration system user, create a security group, add the user to the group, and assign required permissions, do the following:

   1. Create integration system user:

      1. Search for Create system integration group task.

      2. In the form:

         1. Enter Username.
         2. Set Password.
         3. Set Session timeout to 0.
         4. Check Do not allow UI sessions.
         5. Click Ok.

      

      The created user details are displayed.

      

   2. Create integration security group:

      1. Search for Create security group.
      2. In the dialog window:
         1. Select Type as Integration system security group (Constrained).
         2. Enter a Name.
         3. Click Ok

      

      1. In the Edit integration system security group (Constrained) window:

         1. Add the Integration system user to the group under Integration system users.
         2. Add relevant Organizations.
         3. Click Ok.
         4. Click Done.

      

      

   3. Grant domain access:

      1. Search for Maintain permission for security group.

      2. In the dialog window:

         1. Set Operation as Maintain.
         2. Add the created Security group.

         3. Click the three dots (...) beside the group name and select Edit.

            

      3. In the Maintain permission for security group page:

         1. Click the add icon under Domain security policy permissions.
         2. Add the following permissions for View/modify access and domain security policy:
            • Worker
              • Worker data: Public worker reports
              • Worker data: Job details
              • Worker data: Organization information
              • Worker data: Worker ID
            • Customer
              • View: Customer
            • Jobs
              • Worker data: All positions

         3. Click Ok.

            

         4. Click Done.

            

         5. Repeat the search for Maintain permission for security group, verify that the roles and policies are added, and click Ok.

            

   4. Activate pending security policy changes:

      1. Search for Activate pending security policy changes.

      2. In the Activate pending policy changes page:

         1. Add Comments.

         2. Click Ok.

            

      3. Review the changes on the Activate pending security policy changes page

      4. Click Confirm.

      5. Click Ok.

         

      The View security timestamp page is displayed.

      

   5. Generate refresh token:

      1. Search for Register API client for integration.

      2. In the form:

         1. Enter Client name.
         2. Select Non-expiring Refresh token.
         3. Add Scopes: Personal data and Integration.

         4. Click Done.

            

      3. Search for View API clients.

      4. Navigate to API clients for integrations.

      5. Locate the created user.

      6. Click the three dots (...) next to the user and select API client >> Manage refresh token for integration.

         

      7. In the dialog window:

         1. Select the Workday account user

         2. Click Ok

            

      8. On the Delete or regenerate refresh token page:

         1. Select Generate new refresh token.
         2. Click Ok.

         

      You can see the Successfully regenerated refresh token confirmation message with details.

Create a Workday connector

Next steps

• To attach your data store to an app, create an app and select your data store following the steps in Create an app.

• To preview how your search results appear after your app and data store are set up, see Preview search results. If you used third-party access control, see Preview results for apps with third-party access control.

• To enable alerts for the data store, see Configure alerts for third-party data stores.