Skip to main content
Feedback

Workday HR connection

Updated 
info

This connector is currently in Early Access. Contact support for details.

Workday HR syncs the HCM (Human Capital Management) half of Workday's REST API into your data warehouse — workers, jobs, organizational structure, people, compensation, absence management, time tracking, payroll, performance, and talent data.

Prerequisite

You need a registered Workday Integrations API client with an OAuth 2.0 refresh token, your Workday host, and your Workday tenant name.

Authentication methods

You use OAuth 2.0 refresh token authentication when you create the connection:

  • OAuth Client ID and OAuth Client Secret: credentials for your registered Workday Integrations API client.
  • Refresh Token: a long-lived token that lets Data Integration request new access tokens indefinitely, without re-authorizing.

Retrieving your credentials

  1. Have your Workday administrator register an API client for integrations (Register API Client for Integrations in Workday), with the Refresh Token grant type enabled.
  2. Perform the one-time OAuth 2.0 authorization code exchange against your Workday tenant's token endpoint, outside of Data Integration, to obtain a refresh token. Note the Client ID and Client Secret issued with the API client.
  3. Find your Workday host (no path), for example https://wd2-impl-services1.workday.com — the same host used in your Workday URLs.
  4. Find your Workday tenant name — the segment in your OAuth token URL, for example the mytenant in https://<host>/ccx/oauth2/mytenant/token. This is case-sensitive.
  5. Find your full OAuth token URL — the same endpoint used both for the one-time authorization code exchange and for every ongoing token refresh, for example https://wd2-impl-services1.workday.com/ccx/oauth2/mytenant/token.

Connecting Workday HR to Data Integration

  1. Navigate to the Data Integration console.
  2. Select Connections, then select + New Connection.
  3. Search for and select Workday HR as the connection type.
  4. Enter a Connection Name to identify this connection.
  5. Enter your Workday host, no path — for example https://wd2-impl-services1.workday.com.
  6. Enter your full OAuth Token URL.
  7. Enter your OAuth Client ID and OAuth Client Secret.
  8. Enter your Refresh Token.
  9. Enter your Workday Tenant.
  10. Select Test Connection to confirm Data Integration can authenticate and reach your tenant.
  11. Select Save to finish creating the connection.

Known limitations

  • Workday Tenant is a plain text field — enter it exactly as it appears in your OAuth token URL, case-sensitive. There's no picker, since this value is specific to your own tenant.
  • Workday hosts are shared across customers (one host serves many tenants), so both the host and the tenant must be entered correctly — a correct host with the wrong tenant fails.
  • Finance-related objects are out of scope for this connector; see the separate Workday Finance connector. Custom reports remain in Workday RaaS.

If you need a report or object that isn't currently supported, contact support so it can be evaluated for a future release.

On this Page