Ensure that you have:

  1. Go to Integrations > Provisioning.
  2. Click + and then click New connection.
  3. For Identity Store, click the Select button.
  4. Under Workday, click Select and then click Next.
  5. Enter a name and description for this provisioning connection. The connection name will appear in the list when you've completed and saved the connection.
  6. Click Next.
  7. On the Configure authentication screen, enter the following:
    • User name. The Workday Integration System user account. For more information, see Creating a Workday Integration System User.
    • Password. The password for the Workday Integration System user account.
    • Tenant ID. The name of your Workday tenant. To find the tenant name, start Workday and go to the Edit Tenant Setup - Security task. The tenant name is shown in the list.
    • API host. The hostname, including subdomain, for your Workday tenant. To find the hostname, see Identifying your Workday hostname. For example, <your_subdomain>.workday.com.
  8. Click Test connection to verify that PingOne can establish a connection to Workday.

    If there are any issues with the connection, a Test Connection Failed dialog box opens. Click Continue to resume the setup with an invalid connection.


    You cannot use the connection for provisioning until you have established a valid connection to Workday. To retry, click Cancel in the Test Connection Failed dialog box and repeat step 7.

    Learn more about troubleshooting your connection in Troubleshooting Test Connections Failure.
  9. Click Finish.

The Workday provisioning connection is complete and is added to the list of provisioning connections on the Provisioning page.

To define which users are provisioned and how attributes are mapped between PingOne and an external identity store, follow the instructions in Creating an inbound rule.