- 20 Mar 2024
- 3 Minutes to read
- Print
- DarkLight
- PDF
Workday Report
- Updated on 20 Mar 2024
- 3 Minutes to read
- Print
- DarkLight
- PDF
This guide will teach you how to set up the connector between Workday Report (as a Service) and Clarity Security.
Estimated time to complete: 30-60 minutes
If you run into any problems, please contact your support team or support@claritysecurity.io.
How to Setup the Connector
Step 1: Create a Workday Integration System User (ISU)
It is recommended to create a dedicated ISU in Workday to be the report owner and provide access to the report for Clarity.
You may already have a suitable ISU that you may wish to use, and that's okay.
If you need to create one:
Go to your Workday tenant and search for "create integration system user"
Under Tasks & Reports, click Create Integration System User
Enter a username & password. You'll need to input these later on during Application setup in Clarity.
Leave the Require New Password at Next Sign In option unchecked
Enter 0 for Session Timeout Minutes
Check Do Not Allow UI Sessions to ensure this user cannot sign into your Workday
Click OK
NOTE: The ISU must be part of an Unconstrained Integration System Security Group with a series of "Get Only" Domain Security Policies granted to it to access the appropriate worker data.
Step 2: Create the Custom Report in Workday
Enter the following properties:
Report Type = Advanced
Data Source = All Active and Terminated Workers. Your decision to include pre-hires should depend on whether or not Clarity is doing life-cycle management and if you want those pre-hires to be provisioned into other downstream applications before their hire date.
Data Source Type = Standard
Primary Business Object = Worker
Add the following Columns to the report, making note of which are Required by Clarity:
user_id (required)
first_name (required if not using a nickname or preferred name)
last_name (required)
nickname (optional in place of first_name, so long as your organization never leaves this blank)
email (required)
active (required)
super_ref (this is Manager ID, Clarity only matches on ID and not name for Manager/Supervisors)
business_title
position_title
division
category
Go to the Advanced tab and set Enable As Web Service = Yes
Go to the Share tab and make sure your ISU is the owner of the report
Step 3: Copy the Report URL in JSON format
You'll need this for your Clarity setup to go along with the username & password of your ISU
Go to the Workday Report Console to open the list of Report URLs. Copy the JSON URL link
Step 4: Login to your Clarity Security tenant
https://your-tenant.claritysecurity.io/
Step 5: Click on Applications, then Marketplace
Step 6: Find Workday Report
Scroll to or search for Workday Report in the list of applications from the marketplace, then click Connect.
Step 7: Connect App
Complete the App Settings form. Details for fields common to all applications can be found at the following article: Common App Configuration Steps
Enter the username & password for the ISU on the first tab and click Validate
Step 8: App Settings Part 1 - Add a Report
Choose Report Type: Identities
Enter the full URL that you copied in Step 3
Give the report a simple Name/Description then click Add New Report.
Clarity will connect and import the report so that you can map the fields from the report to Clarity fields
Mapping the fields should be pretty straightforward for most of them.
Use "Attribute" for any fields such as business_title or division in order to use those fields in your Org Units/Roles in Clarity
Step 9: App Settings Part 2
Complete the App Settings form. Details for each field can be found at the following article: Common App Configuration Steps
Step 10: User Settings
Complete the User Settings form, and check the table at the top to see if any features are unsupported. Details for each field can be found in the following article: Common App Configuration Steps
Step 11: Validate Your Selections and Save
Save
Clicking the Save button will trigger the first full sync for your application (even if you selected Manual syncing). This includes Service Users, Entitlements, Service User Entitlements, Service User Attributes.
Need Help?
If you have any problems, contact your customer success team. You can also get in touch with our general support via email, open a support ticket. Our general support team is available Monday - Friday from 8:00 AM - 6:30 PM CST.