Account Attributes

The following table lists the account attributes:

Attributes

Description

Path

USERID

The Workday account user name.

Workday_Account_for_Worker_Data/User_Name

FILENUMBER

The unique ID for Employee, Contractor, Service Center Representative, Extended Enterprise Learner, Implementer, Integration and Students System accounts.

This identifier can be an alphanumeric value based on the value present in the Workday system.

Note
When aggregating service center representative accounts, implementers and integration system accounts, the WID is populated in the FILENUMBERattribute.

This is an Identity Attribute which must not be changed.

Workday_Account_Reference/ID[@type='Employee_ID'] |

Workday_Account_Reference/ID[@type='Contingent_Worker_ID'] |

Workday_Account_Reference/ID[@type='Service_Center_Representative_ID'] |

Workday_Account_Reference/ID[@type='Extended_Enterprise_Learner_ID']

ACCOUNT_DISABLED

Indicates whether the Workday account is disabled.

Workday_Account_for_Worker_Data/Account_Disabled

REQUIRE_NEW_PASSWORD_AT_NEXT_SIGN_IN

Indicates whether the Workday account will require a new password at next sign in.

Workday_Account_for_Worker_Data/Require_New_Password_at_Next_Sign_In

SESSION_TIMEOUT_MINUTES

The number of minutes the user may be idle.

Workday_Account_for_Worker_Data/Session_Timeout_Minutes

MULTI_FACTOR_AUTHENTICATION_EXEMPT

Indicates if the user is exempt from multi-factor authentication.

Workday_Account_for_Worker_Data/Multi-factor_Authentication_Exempt

MULTI_FACTOR_AUTHENTICATION_GRACE_PERIOD_ENABLED

Indicates if the user’s multi-factor grace period is enabled.

Workday_Account_for_Worker_Data/Multi-factor_Authentication_Grace_Period_Disabled

GRACE_PERIOD_LOGINS_REMAINING

The remaining number of times the user can login without providing a multi-factor authentication passcode.

Workday_Account_for_Worker_Data/Grace_Period_Logins_Remaining

ACCOUNT_EXPIRATION_DATE

Prevents the user from signing on to the system after this date.

Workday_Account_for_Worker_Data/Account_Expiration_Date

OPENID_IDENTIFIER

The email address associated with the Open ID account.

Workday_Account_for_Worker_Data/OpenID_Identifier

OPENID_INTERNAL_IDENTIFIER

Open ID GUID.

Workday_Account_for_Worker_Data/OpenID_Internal_Identifier

OPENID_CONNECT_INTERNAL_IDENTIFIER

OpenID Connect subject.

Workday_Account_for_Worker_Data/OpenID_Connect_Internal_Identifier

EXEMPT_FROM_DELEGATED_AUTHENTICATION

Indicates if the user is exempt from delegated authentication.

Workday_Account_for_Worker_Data/Exempt_from_Delegated_Authentication

WORKER_TYPE

Workers type (Employee|Contingent_Worker|Service Center Representative|Extended Enterprise Learner|Implementer Account|Integration System User|Applicant Student|Prospect Student|Pre-Matriculant Student|Matriculant Student)

Workday_Account_Reference/ID[@type='Employee_ID']/@type |

Workday_Account_Reference/ID[@type='Contingent_Worker_ID']/@type | Workday_Account_Reference/ID[@type='Service_Center_Representative_ID']/@type | Workday_Account_Reference/ID[@type='Extended_Enterprise_Learner_ID']/@type

USER_BASED_SECURITY_GROUPS

Enables aggregation of user-based security groups of the account.

Get_Assign_User-Based_Security_Groups_Response/ns1:Response_Data/ns1:Assign_User-Based_Security_Groups

ORG_ROLE##ORG_NAME

Fetches the role name along with the organization separated by ## delimiter.

Path is automatically assigned.

INTEGRATION_SYSTEM_ID

Fetches Integration System ID associated with Integration system account.

The path is automatically assigned.

Additional Attribute

Below attribute needs to be added manually in application XML:

Attributes

Description

Path

SECURITY_GROUPS

Fetches All the security groups of the account except user-based security groups.

The path is automatically assigned.

Note
The COMMENT and DESCRIPTOR attributes are only supported for the OAuth 2.0 Authentication Type .