System Guides | Workday
You can connect your Moveworks bot to Workday by
- Create an Integration Systems User (ISU)
- Provision a Refresh Token for the ISU
- Create a Security Group
- Add ISU to Security Group
- Add Relevant Domain Security Policies to Security Group
- Create API Client for IntegrationsU
- Create Connector in Moveworks Creator Studio
The first 6 steps take place in Workday, and only the last step takes place in Moveworks Creator Studio.
To get access to Creator Studio, click here.
To see the full list of Creator Studio integrations, click here.
Note
You can easily copy-paste text from the purple blocks into the search bar in Workday. These blocks will be embedded throughout this guide for easy reference.
1) Create an Integration Systems User (ISU)
Use the universal search to find the Create Integration System User (ISU) Workday Task.
Create Integration System User
Use the Create Integration System User (ISU) Workday Task to create a user following these settings. Write down the username and password that you use.
Validate that the ISU has these default permissions after creation.
2) Create a Security Group
Access Create Security Group task (from Workday's Universal Search) and create an Integration System Security Group (Unconstrained).
Create Security Group
Call the Integration Systems Security Group name **Moveworks ISSG**
3) Add ISU to Security Group
Use the All Workday Accounts report to find the account again.
All Workday Accounts
Click on Security Profile > Assign Integration System Security Groups
Assign the ISU from previous steps to the Integrations System Security Group
3) Add Relevant Domain Security Policies to Security Group
Navigate to the ISSG using the View Security Group Report
View Security Group
Use the menu item to access Security Group > Maintain Domain Permissions for Security Group
Note
The specific functional areas you need to add as domain permissions depends on the use case you want to build. At a bare minimum, you will need View and Get Permissions to the Workday Query Language and Worker functional areas. See our use case guides below for more details
Add any permissions that are needed for your Moveworks bot. Click Ok.
Find the full list of permissions in your desired use case guide below.
Run the Activate Pending Security Policy Changes task to activate permissions
5) Create API Client for Integrations
Universal search for Register API Client for Integrations
Register API Client for Integrations
Set the name to Moveworks and add the scopes required.
Note your Client ID & Client Secret
Navigate to View API Clients. Note the Token Endpoint and Workday REST API Endpoint
View API Clients
6) Provision a Refresh Token for the ISU
From the View API Clients view, click on the API Clients for Integrations tab. Pick out the API Client you just created
From the related actions menu, select Manage Refresh Tokens for Integrations
Add the ISU Account you created earlier to the API Client
Select Generate Refresh Token
Note your new refresh token.
7) Create Connector in Moveworks Creator Studio
Configure your connector with the following API Credentials you collected from previous steps
- Client ID
- Client Secret
- Client Refresh Token for the ISU
- Token URL
- Workday REST API Endpoint
