Connect Workday for HR data

If you want to connect Workday to use for ASC 350-40 to retrieve employee title, ID, and other non pay data only, follow the below instructions.

NeoTax uses Finch Connect to securely connect to and retrieve data from Workday.

Before you start

Please ensure that you have Administrator privileges in Workday before continuing with the instructions below.

Instructions

Step 1. Create an Integration System User in Workday

1. Log in to your Workday portal.

2. In the search bar at the top of the page, search for “Create Integration System User”.

3. Select the Create Integration System User task.

4. Enter a User Name and Password of your choosing for the new Integration System User. Make sure the password does not contain any of the following characters: “&”, “”, “>”

5. Save this login information as you’ll need it later.

   

6. Please ensure that Require New Password at Next Sign In is not checked.

7. Set Session Timeout Minutes to 0.

8. Please ensure that Do Not Allow UI Sessions is checked.

9. Click OK to create the Integration System User.

Step 2. Configure a Security Group

1. In the search bar at the top of the page, search for “Create Security Group”.

2. Select the Create Security Group task.

3. On the Create Security Group page, from the Type of Tenanted Security Group dropdown, select Integration System Security Group (Unconstrained).

4. Enter a name for the security group in the Name field.

5. Click OK to create the security group.

6. On the Edit Integration System Security Group (Unconstrained) page enter the name of the Integration System User you created in the Integration System Users field

   

7. Click OK to assign the Integration System User to the security group.

Step 3. Configure the Domain Security Policy Permissions

1. In the search bar at the top of the page, search for “Maintain Permissions for Security Group”.
2. Select the Maintain Permissions for Security Group task.
3. Make sure the Operation is Maintain, and the Source Security Group is the security group you created.
4. Configure the Domain Security Policy Permissions based on the requirements of the Workday integration you are connecting and the information below.

Required Domain Security Policies

The following Domain Security Policies are the minimum set that are required in order to connect:

NOTE - View Only will not work. You must select Get Only

Required Domain Security Policies

The following Domain Security Policies enable NeoTax to retrieve additional data.

NOTE - View Only will not work. You must select Get Only

Do NOT enable any Domain Security policies related to pay data.

Step 4. Activate Security Policy Changes

1. In the search bar at the top of the page, search for “Activate Pending Security Policy Changes”.
2. Select the Activate Pending Security Policy Changes task.
3. View the summary of changes waiting to be approved and check the Confirm checkbox

Step 5. Configure Authentication Policy

1. In the search bar at the top of the page, search for “Manage Authentication Policies”.
2. Select the Manage Authentication Policies report.
3. Verify that the Security Group is assigned to a policy that has an Allowed Authentication Type of User Name Password or Any. If this is not the case you must edit the relevant Authentication Policy to add a rule using the steps below:

• Edit the Authentication Policy for the environment you want NeoTax to retrieve data from
• Add a new Authentication Rule for the policy
• Set the Authentication Rule Name to a unique value to identify the rule
• Set the Security Group to the Security Group you created
• Set the Authentication Conditions to Any and the Allowed Authentication Types to Specific > User Name Password.

Step 6. Activate Authentication Policy Changes

1. In the search bar at the top of the page, search for “Activate Pending Authentication Policy Changes”.
2. Select the Activate Pending Authentication Policy Changes task.
3. View the summary of changes waiting to be approved and check the Confirm checkbox

Step 7. Obtain the Web Services Endpoint URL

1. In the search bar at the top of the page, search for “Public Web Services”.

2. Select the Public Web Services report.

3. Find the Human Resources (Public) item in the Web Service column and hover over it so you can click the … menu that appears.

4. In the … menu click Web Service > View WSDL. A new page will open containing the technical specifications for the Workday Human Resources Web Service.

5. Scroll all the way to the bottom of the page and locate the line containing soapbind:address location=. You can also search within the page using Ctrl+F or Cmd+F for the text soapbind:address location=

6. Copy the URL up until /service. Your resulting Web Services Endpoint URL should look something like https://wd5-services1.myworkday.com/ccx

   

7. Save this URL to provide in NeoTax > Finch Connect.

Step 8. Go to NeoTax and Connect the Token

1. Navigate back to NeoTax > go to R&D > Select Payroll > Workday > Click Connect > Open Workday.

   

   1. The instructions will reference pay data. You can ignore that part, since you’ve restricted the token to only have employee data in the above steps.

2. Paste the username and password created in Step 1 into the Username and Password fields.

3. Paste your Workday tenant ID into the Tenant ID field. You can find this value in the URL of your web browser when on the Workday home page:

• If the URL looks like https://impl.workday.com/somecompany then your tenant ID is somecompany

• If the URL looks like https://somecompany.workday.com then your tenant ID is somecompany

  This value is case-sensitive, make sure the case matches what’s in your URL.

1. Paste the Web Services Endpoint URL you copied in Step 7 into the API Base URL field.
2. Click Connect.

Step 9. Select a Company to Connect

The modal will ask you to select which company you’d like to connect. This is a list of companies retrieved from your Workday system that employees area is assigned to.

The company you connect will be the only company NeoTax will retrieve data for.