XPath Schema Mapping

The source schema for the Workday Accounts source is used to configure the objects returned from the source.

The Workday Accounts source currently supports the following attributes and corresponding XPaths:

Attributes

Description

Path

USERID

Workday account username.

Workday_Account_for_Worker_Data/User_Name

FILENUMBER

Unique identifier for the employee or contractor. This identifier can be an alphanumeric value based on the value present in the Workday system.

Note
When aggregating service center representative accounts, the service center representative ID is populated in the FILENUMBER attribute.

Workday_Account_Reference/ID[@type='Employee_ID'] |Workday_Account_Reference/ID[@type='Contingent_Worker_ID']

ACCOUNT_DISABLED

Identifies whether the Workday Account is disabled.

Workday_Account_for_Worker_Data/Account_Disabled

REQUIRE_NEW_PASSWORD_AT_NEXT_SIGN_IN

Indicates whether the Workday account will require a new password at next sign in.

Workday_Account_for_Worker_Data/Require_New_Password_at_Next_Sign_In

SESSION_TIMEOUT_MINUTES

The number of minutes the user may be idle.

Workday_Account_for_Worker_Data/Session_Timeout_Minutes

MULTI_FACTOR_AUTHENTICATION_EXEMPT

Exempt user from multi-factor authentication.

Workday_Account_for_Worker_Data/Multi-factor_Authentication_Exempt

MULTI_FACTOR_AUTHENTICATION_GRACE_PERIOD_ENABLED

Enable user's multi-factor authentication grace period.

Workday_Account_for_Worker_Data/Multi-factor_Authentication_Grace_Period_Disabled

GRACE_PERIOD_LOGINS_REMAINING

The remaining number of times the user can login without providing a multi-factor authentication passcode.

Workday_Account_for_Worker_Data/Grace_Period_Logins_Remaining

ACCOUNT_EXPIRATION_DATE

Prevents the user from signing on to the system after this date.

Workday_Account_for_Worker_Data/Account_Expiration_Date

OPENID_IDENTIFIER

The email address associated with the Open ID account.

Workday_Account_for_Worker_Data/OpenID_Identifier

OPENID_INTERNAL_IDENTIFIER

Open ID GUID.

Workday_Account_for_Worker_Data/OpenID_Internal_Identifier

OPENID_CONNECT_INTERNAL_IDENTIFIER

OpenID Connect subject.

Workday_Account_for_Worker_Data/OpenID_Connect_Internal_Identifier

EXEMPT_FROM_DELEGATED_AUTHENTICATION

Exempt from Delegated.

Workday_Account_for_Worker_Data/Exempt_from_Delegated_Authentication

WORKER_TYPE

Worker's type (Employee|Contingent_Worker).

Workday_Account_Reference/ID[@type='Employee_ID']/@type | Workday_Account_Reference/ID[@type='Contingent_Worker_ID']/@type

USER_BASED_SECURITY_GROUPS

Enables aggregation of user-based security groups

Get_Assign_User-Based_Security_Groups_Response/ns1:Response_Data/ns1:Assign_User-Based_Security_Groups

ORG_ROLE##ORG_NAME

Fetches the role name along with the organization separated by ## delimiter.

Path is automatically assigned.

The Workday Accounts connector supports updating all the schema attributes supported in the Workday managed system.

Note
The ACCOUNT_EXPIRATION_DATE attribute must be in the MM/DD/YYYY format. For example, 07/22/2021.