<aside> 💡 Public

</aside>

Workday - ISU and Web Services Endpoint Authentication

How to link your Workday account to GroWrk using your Workday credentials

Before linking your Workday, we'll need to make sure that the correct permissions are enabled. Below are some detailed steps for granting permissions. Steps One through Five are done within your Workday portal, whereas the last step is done on your Growrk Link prompt.

Step One: Create an Integration System User (ISU)

1. In your Workday portal, log into the Workday tenant.

2. In the Search field, type Create Integration System User.

3. Select the Create Integration System User task.

4. On the Create Integration System User page, in the Account Information section, enter a user name, and enter and confirm a password.

5. Click OK.

Note: due to xml encoding, "&", "<", and ">" cannot be included in the password.

Note: Ensure Require New Password at Next Sign In is NOT checked.

Note: You'll want to add this user to the list of System Users to make sure the password doesn't expire.

Step Two: Create a Security Group and Assign an Integration System User

Now, add this Integration System User to a Security Group:

1. In the Search field, type Create Security Group.
2. Select the Create Security Group task.
3. Click OK.
4. On the Create Security Group page, from the Type of Tenanted Security Group pull-down menu, select Integration System Security Group (Unconstrained).
5. In the Name field, enter a name.
6. Click OK.
7. On the Edit Integration System Security Group (Unconstrained) page, in the Name field, enter the same name you entered when creating the ISU in the first section.
8. Click OK.

Step Three: Configure Domain Security Policy Permissions

1. In the Search field, type Maintain Permissions for Security Group
2. Make sure the Operation is Maintain, and the Source Security Group is the same as the security group that was assigned in Step 2.
3. Add the corresponding Domain Security Policy with GET operation: