Creating a Workday Integration System User
For Workday provisioning, PingOne requires an Integration System User in Workday with a minimally scoped set of permissions. PingOne uses this user account to consume data from Workday through the Workday APIs.
Before you begin
You might already have a suitable Integration System User. If not, use the following procedure to add one.
About this task
The Integration System User must be part of an Unconstrained Integration System Security Group with a series of Get Only Domain Security Policies granted to it to access the appropriate worker data. These domains relate to worker data about their employment status, home and work contact information, and organizations to which they belong.
Steps
-
Go to your Workday tenant and enter
create integration system userin the search field. -
Under Tasks & Reports, click Create Integration System User.
-
Enter a username and password for the new user.
-
Leave the Require New Password at Next Sign In option clear.
-
For Session Timeout Minutes, enter
0. This option helps avoid any issues with PingOne related to timeouts. -
Select Do Not Allow UI Sessions to prevent this user from signing into Workday.
-
Click OK.
