--- title: "Workday HR" slug: "workday-hr" updated: 2026-10-26T14:46:11Z published: 2026-10-26T14:46:11Z canonical: "docs.databee.buzz/workday-hr" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt > Use this file to discover all available pages before exploring further. # Workday HR Workday provides applications for enterprise resource planning (ERP) and human capital management (HCM). DataBee integrates with Workday for the purpose of building an organization's hierarchy, which is used in other views. For detailed information, refer to the [Workday’s official documentation](https://doc.workday.com/). **Integration Method:** API **Tables**: User Inventory (5003) This integration supports the following events. | **Event** | **Description** | | --- | --- | | Active Workers | Fetches information about active workers, organization and hierarchy based on the activity status | | Inactive Workers | Fetches information about inactive workers and organization based on the activity status | This integration supports the following versions. | | | | --- | --- | | Workday API version | v1.0 | > **Note:** > > Workday is a continuously updated cloud service. As for this document preparation, the latest release was in [March 2025](https://newsroom.workday.com/2025-03-19-Workday-2025-Spring-Release-350-New-Features,-Updates,-and-AI-Enhancements-to-Streamline-HR-and-Finance-Processes-for-Customers-Around-the-World). ## Prerequisites 1. The user should have access to the [Workday portal](https://www.workday.com/) with an account that has the **Global Administrator** privileges. 2. The user should have access to the DataBee console. ## Configuration Overview 1. Workday 2. Create an [Integration System User](/user-manual/docs/workday-hr#create-integration-system-user) (ISU) in Workday. 3. [Register an API Client for Integrations](/user-manual/docs/workday-hr#registering-api-client-for-integrations) associated with the ISU an get the Client ID, Client Secret and Refresh Tokens. 4. [Create a Security Group](/user-manual/docs/workday-hr#editing-security-policy), add ISU as member and assign permissions. 5. Create [Workday HR Data Feed](/user-manual/docs/workday-hr#databee-configuration) in the DataBee console with the required Client credentials. | **DataBee Parameter** | **Workday Parameter** | | --- | --- | | Client Key | Client ID | | Client Secret | Client Secret | | Refresh Token | Refresh token | | API Base URL | REST API endpoint | | Token URL and | Token endpoint | ## **Workday Configuration** ### Create Integration System User 1. Login to Workday as an admin and search for **Create Integration System User**. ![Picture 1, Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-9osfn1wn.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) 2. In the dialog box, fill in the required fields of the form and click **OK**. ![A screenshot of a computer AI-generated content may be incorrect., Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-hoixxjci.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) ### Registering API Client for Integrations 1. Search for **Register API Client for Integrations**. ![Picture 3, Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-b7vcttf1.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) 2. In the dialog box, enter the required fields of the form. - Client Name: enter a unique client name. - Non-Expiring Refresh Tokens: SELECT - Disabled: UNSELECT - Scope: Add the following - Implementation - Integration - System - Tenant non-configurable - Include Workday Owned Scope: SELECT ![A screenshot of a computer AI-generated content may be incorrect., Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-tt7jz5hd.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) 3. Click **OK** and save theWorkday API **Client ID** and **Client Secret**. ![Picture 5, Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-2k2wkpv2.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) 4. Search for **View API Clients** in Workday at the above. ![A screenshot of a computer AI-generated content may be incorrect., Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-4ylb0483.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) 5. Capture **datacenter** and **tenant name** for Workday API URLs as shown below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-vsycczia.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) ![Picture 250085384, Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-3e6oq01a.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) 6. Under the **API Clients for Integrations** tab, select the newly **registered API** client above. ![Picture 9, Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-kdfklrnm.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) 7. From **Related Actions**, select **API Client** > **Manage Refresh Tokens for Integrations**. ![A screenshot of a computer AI-generated content may be incorrect., Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-ykhkwu9g.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) 8. In the **Workday Account** field, select the newly created **integration user**click **OK**. ![A screenshot of a computer AI-generated content may be incorrect., Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-iccs0pg3.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) 9. Check **Generate New Refresh Token** for Integrations and click **OK**. ![A screenshot of a computer AI-generated content may be incorrect., Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-tcfhaeo8.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) 10. Copy and savethe generated **Refresh Token**. 11. At this point, you will have the **Refresh Token, Client ID** and **Client Secret**. ### Editing Security Policy 1. Search for **Create Security Group**. ![A screenshot of a chat AI-generated content may be incorrect., Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-u45h4zzq.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) 2. Fill in the fields: - Type of Tenanted Security Group: Integration System Security Group (Unconstrained) - Name:assign a name. ![A screenshot of a security group AI-generated content may be incorrect., Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-1tmred65.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) 3. Select the newly created **Integration System User**. ![A screenshot of a computer AI-generated content may be incorrect., Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-qke3hmw2.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) 4. From **Related Actions**, select **Security Group** > **Maintain Domain Permissions for Security Group**. ![A screenshot of a computer AI-generated content may be incorrect., Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-b1gznu2d.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) 5. Add the following permissions to the group: | | | | | | | --- | --- | --- | --- | --- | | | | | **Operations** | | | **Domain Security Policy** | | **Functional Area** | **VIEW** | **GET** | | Person Data: Learning | | Learning Core | ✔ | ✔ | | Reports: Learning Record | | Learning Core | ✔ | ✔ | | Manage: Organization Roles | | Organization and Roles | ✔ | ✔ | | Reports: Organization | | Organization and Roles | ✔ | ✔ | | Reports: Manager | | Staffing | ✔ | ✔ | | Worker Data: Public Worker Reports | | Staffing | ✔ | ✔ | | Worker Data: Workers | | Staffing | ✔ | ✔ | ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/image(402).png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) 6. Search for Security Policy Changes and **activate** the **Security Policy Changes**. ![A screenshot of a computer AI-generated content may be incorrect., Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-1lsg3oto.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) ## DataBee Configuration 1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-h0j6jn5x.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) 2. Search for the **Workday HR** and click it as shown below. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-9fxluu4h.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) 3. Click on the **API Ingest** option for collection method. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-85lclfpz.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) 4. Enter feed contact information and click **Next**. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-hd9yst9p.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) 5. In the configuration page, confirm the following: - Select the event type and enter the tenant's name. - Refresh Token: Paste the Workday Refresh Token. - Client Key: Paste Workday Client ID. - Client Secret: Paste Workday Client Secret. - Token URL: Replace the placeholder. - API URL: Ensure the datacenter in the API Base URL matches Workday REST endpoint. - Event Types: Preselected for all the event types that integration pulls. ![A screenshot of a computer AI-generated content may be incorrect.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/workday-hr-july25-image-4ahu2u0i.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A32%3A39Z&se=2026-10-30T12%3A32%3A39Z&sr=c&sp=r&sig=QnDLJFtO1NiK4MN5l%2Bw3kKwZ%2FYJtOgUhvzAOiUtMTws%3D) - Click **Submit**. ## Troubleshooting Tips - If you encounter an **Invalid client** or **Unauthorized client** error, it may be due to incorrect credentials. Please double-check that the client key, client secret, and Tenant are entered correctly. To avoid any issues, consider pasting it into a text editor to ensure there are no extra spaces or unexpected characters before reconfiguring the DataBee feed. - If you receive an **Unauthorized** error, it may be because the client ID and client secret belong to different applications. Verify that you are using credentials from the same tenant to resolve the issue. > **Location Fields** > > The Workday HR feed now maps city and postal code information from Workday worker records where these fields are available. These values are surfaced in the **User Inventory** data, enriching your organization hierarchy and enabling location-based filtering and reporting in DataBee.