# Configuring the Workday SaaS Connector

To connect Workday to Agentic Fabric, you'll create an integration user, API client, and refresh token in Workday. This will allow Agentic Fabric to discover and aggregate human accounts.

## Creating an Integration User in Workday

1. Follow the Workday SaaS [connector documentation](https://documentation.sailpoint.com/connectors/saas/workday/help/saas_connectivity/workday/creation_of_integration_.html) to create an integration user with the required permissions. The Workday account used for the API client to generate a refresh token must be an integration user and must have the permissions as described in [Basic Authentication](https://documentation.sailpoint.com/connectors/saas/workday/help/saas_connectivity/workday/basic_authentication.html).

## Creating an API Client and Refresh Token in Workday

1. Follow the Workday [product documentation](https://developer.workday.com/documentation/zwx1518028675482) to create an API client.
2. Select the following scopes for the client:

- Staffing

- System

- Contact Information

- Personal Data

- Integration

- Organization and Roles

3. Copy the client ID and secret for the client. You'll need these values to connect Workday to Agentic Fabric.
4. Select the API client and go to **API Client Actions > API Client > Manage Refresh Tokens for Integration**.
5. Select the Workday account of the integration user and then select **Next**.
6. Select the **Generate New Refresh Token** checkbox and then select **OK**.

## Connecting Workday to Agentic Fabric

1. Go to the **Connect Source** step of the Agentic Fabric onboarding experience.
2. Select **Workday SaaS** from the left pane.
3. In the **Workday SaaS** section, complete the following:

- In the **Source Name** field, enter a unique name for the source.

- In the **Source Owner** field, select the identity who will own the source.

- In the **Description** field, enter a unique description for the source to distinguish it from similar connections.

4. In the **Configure Authentication** section, complete the following:

- In the **Workday URL** field, enter the URL that is used to connect to the Human Resource module of Workday. Use the format: `https://wd2-impl-services1.workday.com/ccx/service/tenant1/Human_Resources`, where `tenant1` is the Workday tenant name.
    - In the **Client ID** field, enter the client ID for the API client you created.
    - In the **Client Secret** field, enter the client secret for the API client you created.
    - In the **Refresh Token** field, enter the refresh token you generated.
    - In the **Token URL** field, enter the URL used for token generation (`https://{yourDomain}/oauth2/v1/token`).

5. Select **Test Connection** to ensure the connection is successful.

6. If the test is successful, select **Aggregate** to run an aggregation for the source. Select **Exit** to skip this step. You can configure aggregations for the source later in the source's configuration.

A **Completed** status is now displayed next to the source in the left panel.

7. Choose another connector to configure or select **Continue** to proceed to the next onboarding step.

Configuring the Workday SaaS Connector

To connect Workday to Agentic Fabric, you'll create an integration user, API client, and refresh token in Workday. This will allow Agentic Fabric to discover and aggregate human accounts.

Creating an Integration User in Workday

Follow the Workday SaaS connector documentation to create an integration user with the required permissions. The Workday account used for the API client to generate a refresh token must be an integration user and must have the permissions as described in Basic Authentication.

Creating an API Client and Refresh Token in Workday

Follow the Workday product documentation to create an API client.
Select the following scopes for the client:
- Staffing
- System
- Contact Information
- Personal Data
- Integration
- Organization and Roles
Copy the client ID and secret for the client. You'll need these values to connect Workday to Agentic Fabric.
Select the API client and go to API Client Actions > API Client > Manage Refresh Tokens for Integration.
Select the Workday account of the integration user and then select Next.
Select the Generate New Refresh Token checkbox and then select OK.

Connecting Workday to Agentic Fabric

Go to the Connect Source step of the Agentic Fabric onboarding experience.
Select Workday SaaS from the left pane.
In the Workday SaaS section, complete the following:
- In the Source Name field, enter a unique name for the source.
- In the Source Owner field, select the identity who will own the source.
- In the Description field, enter a unique description for the source to distinguish it from similar connections.
In the Configure Authentication section, complete the following:
- In the Workday URL field, enter the URL that is used to connect to the Human Resource module of Workday. Use the format: https://wd2-impl-services1.workday.com/ccx/service/tenant1/Human_Resources, where tenant1 is the Workday tenant name.
- In the Client ID field, enter the client ID for the API client you created.
- In the Client Secret field, enter the client secret for the API client you created.
- In the Refresh Token field, enter the refresh token you generated.
- In the Token URL field, enter the URL used for token generation (https://{yourDomain}/oauth2/v1/token).
Select Test Connection to ensure the connection is successful.
If the test is successful, select Aggregate to run an aggregation for the source. Select Exit to skip this step. You can configure aggregations for the source later in the source's configuration.

A Completed status is now displayed next to the source in the left panel.
Choose another connector to configure or select Continue to proceed to the next onboarding step.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.