Workday

What it covers

HRIS: onboarding completion, background checks, and timely offboarding.

Credential to create

Workday Integration System User (ISU) + OAuth API client, plus a custom worker report

Permissions to grant

• Get: Worker data
• Run: your custom worker report
• Get: Learning (for training completions)

Setup steps

1. In Workday, create an Integration System User (ISU) and a security group granting Get on Worker data and Run on your report.
2. Register an API Client for Integrations (OAuth) for the ISU.
3. Build a custom worker report exposed as a JSON web service that emits these fields: active/status, onboardingComplete, backgroundCheckComplete, accessRevoked.
4. To sync training taken in Workday Learning, also emit each worker's email (email / primaryWorkEmail) and their completed courses - either a completedTraining list of { name, completedOn } or boolean flags (securityTrainingComplete, phishingTrainingComplete, hipaaTrainingComplete, pciTrainingComplete).
5. Enter the report base URL and path, and paste the OAuth token.

Notes and gotchas

• The three controls read the field names above. Alias your report columns to exactly these names (values like true / Yes / Complete are accepted), or the controls cannot evaluate.
• Training sync: course names are matched by keyword to Joopler modules (e.g. anything with 'phishing' -> Phishing Defense, 'HIPAA' -> HIPAA). A completion with an email that matches a person clears their outstanding training and counts toward the training control - no double entry.
• OAuth tokens expire; use a refresh-token or client-credentials client so runs keep working.