Workday offers enterprise-level software solutions for human resource and financial management.

Pricing: Workday pricing is not public.

Integration Information

Connection details

  • Status: published

  • Type: API

  • Endpoints used:
    Authentication:
    * https://{subdomain}/ccx/service/{tenant}/Human_Resources/v36.1

  • Permissions required (user):

    • Admin account is needed to be able to follow guides from the instruction document, i.e. to create Integration System User and Integration System Groupe and give the proper rights.

Instructions

In this document, we will provide instructions for connecting Workday with LeanIX SMP to get accounts data.

​1​ Configure a System Integration User in Workday

To create an integration system user:

  1. Sign into your Workday tenant using an administrator account.
  2. Search for and open the Create Integration System User task.
  3. Create Integration System User by supplying a User Name (LeanIxSiIntegrationUser) and Password for a new Integration System User.
    1. Leave the Require New Password at Next Sign In option unchecked, because this user will be logging on programmatically.
    2. Leave the Session Timeout Minutes with its default value of 0, which will prevent the user’s sessions from timing out prematurely.

​2​ Create a Security Group

You need to create an unconstrained integration system security group and assign the user to it. To create a security group:

  1. Search for and open the Create Security Group task.
  2. In the Type of Tenanted Security Group field, choose Integration System Security Group (Unconstrained).
  3. Enter a group name “LeanIxSiIntegrationGroup” and click OK.
  4. Select the user you created (LeanIxSiIntegrationUser) from the Integration System Users choice list and click OK, and then click Done.

​3​ Configure security group options

Add the integration security group to domains by completing the following steps:

  1. Search for domain: manage org and open the Manage: Organization Integration domain.
  2. Click the ellipsis (...) next to Manage Organization Information. In the window that opens, point to Domain and select Edit Security Policy Permissions.
  3. Under Integration Permissions, add the security group “LeanIxSiIntegrationGroup” (GET and PUT) that you created and click OK.

    Next, follow steps 1-3 add the security group under each permission for HR module. Permission names could differ so please adjust access to appropriate resources. See the list below for permissions/resources:
    For HR:
  4. domain: Worker Data: Public Worker Reports (GET only)
  5. domain: Worker Data: Current Staffing Information (GET only)
  6. domain: Worker Data: All Positions (GET only)
  7. domain: Worker Data: Personal Data (GET only)
  8. domain: Worker Data: Worker ID (GET only)
  9. domain: Worker Data: Work Contact Information (GET only)
  10. domain: Worker Data: Business Title on Worker Profile (GET only)

​4​ Activate security policy changes

Activate Pending Security Policy Changes by completing the following steps:

  1. Search for act pending and then click on the link Activate Pending Security Policy Changes.
  2. Begin the Activate Pending Security Policy Changes task by entering a comment for auditing purposes, and then click OK.
  3. Complete the task on the next screen by checking the checkbox Confirm, and then click OK. Find all the activated domain security policies listed in table Domain Security Policies.

​5​ Workday Web Services Endpoint Data

To obtain the Web services endpoint, simply look up the WSDL of any of the Web services in your organization, as follows:

  1. Search for and open Public Web Services.
  2. From the Public Web Services list, select any one of them (e.g. Human Resources) and click the ellipsis (…) to reveal a drop-down menu.
  3. Select Web Service \View WSDL, which displays the full WSDL in a separate window.
  4. In the WSDL, search for soapbind:address to see the Web services endpoint corresponding to the Web service that you chose. The Web Services endpoint is combined of:
    https://\<subdomain>/ccx/service/<tenantName>/Human_Resources/v36.1
  5. For the LeanIX SMP configuration, you only need two parts of the found URL: subdomain and tenantName.
    For example, if the value in the WSDL is
  6. https://**implcc.workday.com**/ccx/service/**leanixsi**/Human_Resources/v36.1.
  7. Subdomain: implcc.workday.com
  8. TenantName: leanixsi

​6​ Configure Workday Integration in LeanIX SMP

  1. Log into LeanIX SMP and navigate to Workday (https://us-si.leanix.net/#/service/Workday/settings or https://eu-si.leanix.net/#/service/Workday/settings)
  2. Click on Integrate button and fill out the form with appropriate credentials
    1. Subdomain
    2. Tenant Name
    3. Username
    4. Password

Did this page help you?