Workday

Workday is a provider of cloud-based software that specializes in applications for enterprise resource planning (ERP) and human capital management (HCM). DataBee integrates with Workday for the purpose of building the organization hierarchy, which is used in other views.
For detailed information, please refer to the Workday’s official documentation.

Integration Method: API

Tables: User Inventory Info (5003), Authentication (3002), Web Resource Activity (6001)

This integration supports the following versions.

Note:

Workday is a continuously updated cloud service. As for this document preparation, the latest release was in September 2024.

Prerequisites

1. The user should have access to the Workday portal with an account that has the Global Administrator privileges.

2. The user should have access to the DataBee console.

Configuration Overview

1. Workday

   1. Create an Integration System User (ISU) in Workday.

   2. Register an API Client for Integrations associated with the ISU in Workday to get the Client ID, Client Secret and Refresh Tokens

   3. Create a Security Group, add ISU as member and assign permissions

2. Create Workday Data Feed in the DataBee console with the required Client credentials.

   DataBee Parameter	Workday Parameter
   Client Key	Client ID
   Client Secret	Client Secret
   Refresh Token	Refresh token
   API Base URL	REST API endpoint
   Token URL and <tenant>	Token endpoint

Workday Configuration

Create Integration System User

1. Login to Workday as an admin and search for Create Integration System User.

   

2. In the dialog box, fill in the required fields of the form and click OK.

   

Registering API Client for Integrations

1. Search for Register API Client for Integrations.

   

2. In the dialog box, enter the required fields of the form

   • Name

   • Non-Expiring Refresh Tokens: SELECT

   • Disabled: UNSELECT

   • Scope: add the following

     • Implementation

     • Integration

     • System

     • Tenant non-configurable

   1. Include Workday Owned Scope: SELECT.

      

3. Click OK and save the Workday API Client ID & Client Secret.

   

4. Search for View API Clients in Workday at the above.
    

5. Capture datacenter and tenant name for Workday API URLs.

   

6. Under the “API Clients for Integrations” tab, select the newly registered API client above.

   

7. From Related Actions, select API Client > Manage Refresh Tokens for Integrations.

   

8. In the Workday Account field, select the newly created integration user click OK.

   

9. Check Generate New Refresh Token for Integrations and click OK.

   

10. Copy and save the generated Refresh Token.

11. At this point, you will have the Refresh Token, Client ID and Client Secret.

Editing Security Policy

1. Search for Create Security Group.

   

2. Fill in the fields:

   1. Type of Tenanted Security Group: Integration System Security Group (Unconstrained).

   2. Name: assign a name.

   

3. Select the newly created Integration System User.

4. From Related Actions, select Security Group > Maintain Domain Permissions for Security Group.

   

5. Add the following "Get" and "View" permissions to the group:

   1. Manage: Organization Roles

   2. Reports: Manager

   3. Reports: Organization

   4. Worker Data: Public Worker Reports.

   5. Worker Data: Workers

   

6. Search for Security Policy Changes and activate the Security Policy Changes.

   

DataBee Configuration 

1. Login to the DataBee UI, navigate to Data > Data Feeds and click the Add New Data Feed button. 

   

2. Search for Workday and click it as shown below.

     

3. Click on the API Ingest option for the collection method.
     

4. Enter feed contact information and click Next.
    

5. In the configuration page, confirm the following:

   • Select the event type and enter the tenant's name.

   • Refresh Token: paste the Workday Refresh Token.

   • Client Key: paste Workday Client ID.

   • Client Secret: paste Workday Client Secret.

   • Token URL: replace the <tenant> placeholder.

   • API URL: ensure the datacenter in the API Base URL matches Workday REST endpoint.

   • Event Types: preselected for all the event types that integration pulls.

   

6. Click Submit.

Troubleshooting Tips

• If you encounter an "Invalid client" or "Unauthorized client" error, it may be due to incorrect credentials. Please double-check that the client key, client secret, and Tenant are entered correctly. To avoid any issues, consider pasting it into a text editor to ensure there are no extra spaces or unexpected characters before reconfiguring the DataBee feed.

• If you receive an "Unauthorized" error, it may be because the client ID and client secret belong to different applications. Kindly verify that you are using credentials from the same tenant to resolve the issue.