# Integrating SailPoint with Ceridian Dayforce HCM

SailPoint's Ceridian Dayforce HCM connector provides the capability for seamless and secure connection to Dayforce HCM, which is used as an authoritative source and acts as a source of employee records.

This guide is designed to give specific information about the requirements and field definitions needed to get a working instance of a Ceridian Dayforce HCM source.

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

The SailPoint Ceridian Dayforce HCM connector supports the following features:

- Account Management

  - Full Account Aggregation
  - Delta aggregation for employees
  - Single Account Aggregation
  - Update account provisioning (limited attributes)
  - Concurrent Employment (Primary or Secondary)

## Prerequisites

Before configuring the Ceridian Dayforce HCM connector, be sure you complete certain tasks or have acquired specific information.

- You must know the Ceridian Dayforce HCM client namespace.

## Required Permissions

You must configure the service account with certain permissions to run a test connection and aggregate or provision data.

### Account Aggregation: Default Attributes

There are specific permissions required to aggregate the default account attributes. You may also need to enable certain security features or grant additional field-level access. The following table lists the default account attributes and the associated permissions and security considerations required to aggregate them. Attributes with similar requirements are grouped together where possible.

<table>   <thead>     <tr>       <th scope="col">Attributes</th>       <th scope="col">Required Permission</th>       <th scope="col">Security Considerations</th>     </tr>   </thead>   <tbody>     <tr>       <td>         <p>Employee XRefCode</p>         <p>Employee Number</p>         <p>Eligible For Rehire</p>         <p>CommonName</p>         <p>HomeOrganization</p>         <p>Federated Id</p>         <p>Hire Date</p>         <p>New Hire Approved</p>         <p>New Hire Approval Date</p>         <p>New Hire Approved By</p>         <p>Original Hire Date</p>         <p>Start Date</p>         <p>Pre Start Date</p>         <p>Login Id</p>         <p>Display Name</p>         <p>First Name</p>         <p>Last Name</p>         <p>Employee Termination Date</p>       </td>       <td>         <p>The user role must have access to the <strong>Read Data</strong> subfeature.</p>         <p>To find the Read Data subfeature, go to <strong>System Admin &gt; Roles &gt; Features &gt; HCM Anywhere &gt; Web Services</strong>.</p>       </td>       <td>         <p>Enable <strong>XRefCode</strong></p>         <p>To enable XRefCode, go to: <strong>System Admin &gt; Roles &gt; Web Services Field-Level Access &gt; RESTful Services &gt; Human Resources &gt; Employee</strong>.</p>       </td>     </tr>     <tr>       <td><p>Employment Status</p></td>       <td>         <p>EmployeeEmploymentStatus (and relevant child nodes)</p>         <p>To enable this feature, go to <strong>System Admin &gt; Roles &gt; Web Services Field-Level Access &gt; RESTful Services &gt; Human Resources</strong>.</p>       </td>       <td rowspan="2">         <p>Enable read access for <strong>Employee Status Information</strong>.</p>         <p>To grant this field-level access, go to <strong>System Admin &gt; Roles &gt; Authorizations</strong>.</p>       </td>     </tr>     <tr>       <td><p>Employment Type</p></td>       <td>         <p>Employment Type</p>         <p>EmployeeEmploymentType (and relevant child nodes)</p>         <p>To enable this feature, go to <strong>System Admin &gt; Roles &gt; Web Services Field-Level Access &gt; RESTful Services &gt; Human Resources</strong>.</p>       </td>     </tr>     <tr>       <td><p>Business Email</p></td>       <td rowspan="3">         <p>PersonContact (and relevant child nodes)</p>         <p>To enable this feature, go to <strong>System Admin &gt; Roles &gt; Web Services Field-Level Access &gt; RESTful Services &gt; Human Resources</strong>.</p>       </td>       <td rowspan="3">         <p>Enable read access for <strong>Employee Contact Information - Personal</strong> and/or <strong>Employee Contact Information - Business</strong>.</p>         <p>To grant this field-level access, go to <strong>System Admin &gt; Roles &gt; Authorizations</strong>.</p>       </td>     </tr>     <tr>       <td><p>Business Phone</p></td>     </tr>     <tr>       <td><p>Business Phone Country Code</p></td>     </tr>     <tr>       <td><p>Location</p></td>       <td rowspan="10">         <p>EmployeeWorkAssignment (and relevant child nodes)</p>         <p>To enable this feature, go to <strong>System Admin &gt; Roles &gt; Web Services Field-Level Access &gt; RESTful Services &gt; Human Resources</strong>.</p>       </td>       <td rowspan="10">         <p>Enable read access for <strong>Employee Work Assignment - Primary Records</strong> .</p>         <p>To grant this field-level access, go to <strong>System Admin &gt; Roles &gt; Authorizations</strong>.</p>       </td>     </tr>     <tr><td><p>Position</p></td></tr>     <tr><td><p>Work Location</p></td></tr>     <tr><td><p>Department</p></td></tr>     <tr><td><p>Job XRefCode</p></td></tr>     <tr><td><p>Job Name</p></td></tr>     <tr><td><p>JobRank</p></td></tr>     <tr><td><p>Job EmployeeEEO</p></td></tr>     <tr><td><p>Job Classification</p></td></tr>     <tr><td><p>Job FLSAStatus</p></td></tr>     <tr>       <td><p>Manager XRefCode</p></td>       <td rowspan="3">         <p>EmployeeManager (and relevant child nodes)</p>         <p>To enable this feature, go to <strong>System Admin &gt; Roles &gt; Web Services Field-Level Access &gt; RESTful Services &gt; Human Resources</strong>.</p>       </td>       <td rowspan="3"><p>None</p></td>     </tr>     <tr><td><p>Manager FirstName</p></td></tr>     <tr><td><p>Manager LastName</p></td></tr>     <tr>       <td><p>Role XRefCode</p></td>       <td rowspan="2">         <p>EmployeeRole (and relevant child nodes)</p>         <p>To enable this feature, go to <strong>System Admin &gt; Roles &gt; Web Services Field-Level Access &gt; RESTful Services &gt; Human Resources</strong>.</p>       </td>       <td rowspan="2">         <p>Enable read access for <strong>Employee Profile - Security Settings - Roles</strong>.</p>         <p>To grant this field-level access, go to <strong>System Admin &gt; Roles &gt; Authorizations</strong>.</p>       </td>     </tr>     <tr><td><p>Role Name</p></td></tr>     <tr>       <td><p>Organization Unit Name</p></td>       <td></td>       <td></td>     </tr>   </tbody> </table>

### Account Aggregation: Additional Attributes

There are specific permissions required to aggregate additional account attributes. You may also need to enable certain security features or grant additional field-level access. The following table lists additional account attributes and the associated permissions and security considerations required to aggregate them. Attributes with similar requirements are grouped together where possible.

<table>   <thead>     <tr>       <th scope="col">Attribute</th>       <th scope="col">Required Permission</th>       <th scope="col">Security Considerations</th>     </tr>   </thead>   <tbody>     <tr>       <td><p>BirthDate</p></td>       <td rowspan="3">         <p>The user role must have access to the <strong>Read Data</strong> subfeature.</p>         <p>To find the Read Data subfeature, go to <strong>System Admin &gt; Roles &gt; Features &gt; HCM Anywhere &gt; Web Services</strong>.</p>       </td>       <td rowspan="3">         <p>Enable <strong>XRefCode</strong></p>         <p>To enable XRefCode, go to: <strong>System Admin &gt; Roles &gt; Web Services Field-Level Access &gt; RESTful Services &gt; Human Resources &gt; Employee</strong>.</p>       </td>     </tr>     <tr><td><p>BioExempt</p></td></tr>     <tr><td><p>Gender</p></td></tr>     <tr>       <td><p>MaritalStatus</p></td>       <td><p>EmployeeMaritalStatus (and relevant child nodes)</p></td>       <td>         <p>Grant read access for <strong>Employee Personal Information</strong></p>         <p>To grant this field-level access, go to <strong>System Admin &gt; Roles &gt; Authorizations</strong>.</p>       </td>     </tr>     <tr>       <td><p>Address</p></td>       <td rowspan="5"><p>PersonAddress (and relevant child nodes)</p></td>       <td rowspan="5">         <p>Grant read access for <strong>Employee Contact Information</strong></p>         <p>To grant this field-level access, go to <strong>System Admin &gt; Roles &gt; Authorizations</strong>.</p>       </td>     </tr>     <tr><td><p>City</p></td></tr>     <tr><td><p>PostalCode</p></td></tr>     <tr><td><p>Country</p></td></tr>     <tr><td><p>State</p></td></tr>   </tbody> </table>

### Provisioning

There are specific permissions required to provision certain account attributes. You will also need to enable certain security features. The following table lists account attributes and the associated permissions and security considerations required to provision them. Attributes with similar requirements are grouped together where possible.

<table>   <thead>     <tr>       <th scope="col">Attribute</th>       <th scope="col">Required Permission</th>       <th scope="col">Security Considerations</th>     </tr>   </thead>   <tbody>     <tr>       <td><p>FirstName</p></td>       <td rowspan="2">         <p>The user role have access to the <strong>PATCH/POST Employee HR Data</strong> subfeature under HCM Anywhere &gt; Web Services in the Features tab of System Admin &gt; Roles.</p>         <p>To find the PATCH/POST Employee HR Data subfeature, go to <strong>System Admin &gt; Roles &gt; Features &gt; HCM Anywhere &gt; Web Services</strong>.</p>       </td>       <td rowspan="2">         <p>Enable <strong>Can Create</strong> and <strong>Can Update</strong></p>         <p>To enable these features, go to <strong>System Admin &gt; Roles &gt; Authorizations</strong>.</p>       </td>     </tr>     <tr><td><p>LastName</p></td></tr>     <tr>       <td><p>BusinessEmail</p></td>       <td rowspan="2">         <p>The user role have access to the <strong>PATCH/POST Employee HR Data</strong> subfeature under HCM Anywhere &gt; Web Services in the Features tab of System Admin &gt; Roles.</p>         <p>To find the PATCH/POST Employee HR Data subfeature, go to <strong>System Admin &gt; Roles &gt; Features &gt; HCM Anywhere &gt; Web Services</strong>.</p>       </td>       <td rowspan="2">         <p>Enable <strong>Can Create</strong> and <strong>Can Update</strong></p>         <p>To enable these features for <strong>Employee Contact Information - Personal</strong> and/or <strong>Employee Contact Information - Business</strong>, go to <strong>System Admin &gt; Roles &gt; Authorizations</strong>.</p>       </td>     </tr>     <tr><td><p>BusinessPhone</p></td></tr>   </tbody> </table>
