OAuth 2.0 Authentication

This section provides the details of the required permissions for the OAuth 2.0 Authentication Type:

  1. Create the API Client.

    For more information on API Client creation, refer to Create API Client for Integration.

  2. The Workday Account used by the API Client to generate a refresh token must be an integration user, and it must have all the permissions as described in Basic Authentication.

  3. Add all of the following functional areas under the API Client Integration used for OAuth 2.0:

    • Staffing

    • System

    • Contact Information

    • Personal Data

    • Integration

    • Organization and Roles

  4. Provide access to the Integration security group for the Workday Query Language domain in the System functional area.

  5. Provide access to the Integration security group for the Worker Data source.

Note
Configure OAuth 2.0 authentication using a designated service account. Ensure this service account has all the required permissions and access scopes, as defined in the Basic Authentication configuration section.