Workday

Workday offers enterprise-level software solutions for human resource and financial management.

Pricing Workday pricing is not public.

Integration Information

Data Collected

Connection details

• Status: Early Access
• Type: api

Instructions

In this document, we will provide instructions for connecting Workday with LeanIX SMP to get accounts data.

​1​ Configure a System Integration User in Workday

To create an integration system user:

1. Sign into your Workday tenant using an administrator account.
2. Search for and open the Create Integration System User task.

3. Create Integration System User by supplying a User Name (LeanIXSMPIntegrationUser) and Password for a new Integration System User.
   1. Leave the Require New Password at Next Sign In option unchecked, because this user will be logging on programmatically.
   2. Leave the Session Timeout Minutes with its default value of 0, which will prevent the user’s sessions from timing out prematurely.

​2​) Create a Security Group

You need to create an unconstrained integration system security group and assign the user to it. To create a security group:

1. Search for and open the Create Security Group task.

2. In the Type of Tenanted Security Group field, choose Integration System Security Group (Unconstrained).

3. Enter a group name “LeanIXSMPIntegrationUser” and click OK.
4. Select the user you created (LeanIXSMPIntegrationUser) from the Integration System Users choice list and click OK, and then click Done.

​3​) Configure security group options

Add the integration security group to domains by completing the following steps:

1. Search for domain: manage org and open the Manage: Organization Integration domain.
2. Click the ellipsis (...) next to Manage Organization Information. In the window that opens, point to Domain and select Edit Security Policy Permissions.

3. Under Integration Permissions, add the security group “LeanIXSMPIntegrationUser” (GET and PUT) that you created and click OK.

Next, follow steps 1-3 add the security group under each permission for HR module. Permission names could differ so please adjust access to appropriate resources. See the list below for permissions/resources:

For suppliers and invoices (accounts payable):

For HR (employees and departments):

​4) Manage Authentication Policies

1. Open the "Manage Authentication Policies" view and select the environment where data should be fetched from (usually called "Production")
2. Navigate to the Authentication Ruleset after clicking on "Edit" at the bottom of the page.
3. Add a new rule for the previously set up integration user and allow access to the system via Username and Password . We also have the capabilities to use a static IP range for this integration, please reach out to [email protected] if this should be configured for you.
4. Once the exception for the SMP integration user is configured, proceed to the next step.

​5) Activate All Pending Security Policy Changes

Activate Pending Security Policy Changes by completing the following steps:

1. Search for act pending and then click on the link Activate All Pending Security Policy Changes.
2. Begin the Activate Pending Security Policy Changes task by entering a comment for auditing purposes, and then click OK.

3. Complete the task on the next screen by checking the checkbox Confirm, and then click OK. Find all the activated domain security policies listed in table Domain Security Policies.

​6)​ Workday Web Services Endpoint Data

To obtain the Web services endpoint, simply look up the WSDL of any of the Web services in your organisation, as follows:

1. Search for and open Public Web Services.
2. From the Public Web Services list, select any one of them (e.g. Human Resources) and click the ellipsis (…) to reveal a drop-down menu.

3. Select Web Service \View WSDL, which displays the full WSDL in a separate window.
4. In the WSDL, search for soapbind:address to see the Web services endpoint corresponding to the Web service that you chose. The Web Services endpoint is combined of:
   [[https://\](https://\)]([https://\](https://\))<subdomain>/ccx/service/<tenantName>/Human_Resources/v36.1
5. For the LeanIX SMP configuration, you only need two parts of the found URL: subdomain and tenantName.
   For example, if the value in the WSDL is
6. https://implcc.workday.com/ccx/service/leanixsi/Human_Resources/v36.1.
7. Subdomain: implcc.workday.com
8. TenantName: leanix

​6​ Configure Workday Integration in LeanIX SMP

1. Log into LeanIX SMP and navigate to Workday (https://us-si.leanix.net/#/service/Workday/settings or https://eu-si.leanix.net/#/service/Workday/settings)

2. Click on Integrate button and fill out the form with appropriate credentials
   1. Subdomain (without the https:// part)
   2. Tenant Name
   3. Username
   4. Password