Skip to content

Workday authentication guide

This guide explains how to acquire credentials and create an OAuth connection for the Workday and Workday Custom Reports components.

Note

You must have access to a Workday account that allows you to use Workday Public Web Services.


Acquire the Host name and Tenant ID

To authenticate the Workday and Workday Custom Reports components, you require the Host and Tenant names from your Workday account, obtained as described below.

Host name

  1. Log in to your Workday account, and ensure you are on the Workday homepage by clicking on the Workday icon in the top left.
  2. On the Workday homepage, type "Public Web Services" into the search bar. Click the Public Web Services search result.
  3. On the Public Web Services screen, click the ... button, and then click Web Service.
  4. Click View WSDL in the resulting message to open the WSDL file.
  5. In the WSDL file, locate soapbind:address.
  6. Copy the hostname from the location element. This is the Host name you will need to authenticate the Workday Extract component.

Tenant ID

You will find your Tenant ID in the URL displayed in the browser address bar. The ID is the string that immediately follows .com in the URL. For example, if the URL is https://your-domain.workday.com/example/home.html, then your Tenant ID would be example. Copy this string, as you will need it to authenticate the Workday components.


Create an OAuth connection for Workday

To create an OAuth connection for the Workday and Workday Custom Reports connectors, you will need the following credentials:

  • Client secret
  • Client ID
  • Authorization URL
  • Access token URL

Find your Workday credentials

You should already have your Workday client secret from when you created the API client in Workday.

To find the other credentials, follow these steps:

  1. Log in to your Workday account, and ensure you are on the Workday homepage by clicking on the Workday icon in the top left.
  2. Search for and click the View API Clients report.
  3. Note the Token Endpoint and Authorization Endpoint URLs at the top of the page.
  4. Click the API client for which you need credentials.
  5. Note the Client ID.

Create an OAuth connection

  1. Log in to your Data Productivity Cloud account.
  2. Click the Design data pipelines tile.
  3. Choose your project. Not set up a project yet? Read Projects to get started.
  4. Click More, then OAuth and then click Add OAuth connection.
  5. Complete the fields using the reference table below.

    Field Description
    OAuth name A unique, descriptive name for your new Workday OAuth connection.
    Provider Choose Workday.
    Authentication type Select OAuth 2.0 Authorization Code Grant.
    Client ID Enter the client ID for your API client from Workday.
    Client Secret Enter the client secret for the API client.
    Authorization URL Enter the Authorization Endpoint URL from Workday.
    Access Token URL Enter the Token Endpoint URL from Workday.
  6. Click Authorize.

  7. A new browser tab will open, connecting you to the identity provider. Upon successful connection and authorization, this browser tab will close.
  8. The OAuth connections menu will now display your new OAuth connection.
  9. Your new OAuth connection is ready for use with the Workday and Workday Custom Reports connectors.