Skip to content

Activity Insights - Workday Accounts

To display activity data from Activity Insights, you must first enable OAuth 2.0, register an API client, and generate a refresh token in Workday Accounts. You’ll then configure the following required sources so that IdentityNow can gather your Workday Accounts information and activity data.

Required Connectors
Workday Accounts The identity governance connector allows you to manage your Workday Accounts and Security Groups in IdentityNow.
Activity Insights - Workday Accounts The Activity Insights connector works with your Workday Accounts identity governance connector to provide activity data for identities.

Enabling OAuth 2.0 Clients in Workday

Before activity insights can display in IdentityNow, you must create an OAuth 2.0 client app in Workday.

  1. On the Workday home page, enter "Edit Tenant Setup - Security" in the search bar and select the related task.
  2. In the OAuth 2.0 Settings section, select the OAuth 2.0 Clients Enabled checkbox to enable OAuth 2.0.
  3. Select OK to save your changes.

You can now register an API Client in Workday to generate a Client ID and Client Secret that you'll use to connect Workday Accounts to IdentityNow.

Registering API Clients in Workday

  1. On the Workday home page, enter " Register API Client for Integrations " in the search bar and select the related task.

  2. Enter a descriptive name for the API client to differentiate it from others.

  3. Select the Non-Expiring Refresh Tokens checkbox.

  4. In the Scope (Functional Areas) field, search for and add Staffing and System.

  5. Select OK to generate a Client ID and a Client Secret.

  6. Copy and store the Client ID and Client Secret in a safe place. You'll need these credentials to connect Workday Accounts to IdentityNow.

Generating a Refresh Token

  1. From the API Client page, select the Menu icon .

  2. Select API Client > Manage Refresh Tokens for Integrations.

  3. Select the Workday account you want to generate a refresh token for and then select OK.

  4. Select the Generate New Refresh Token checkbox and then select OK.

  5. Copy and store this refresh token in a safe place. You’ll need this token to connect Workday Accounts to IdentityNow.

Connecting Workday Accounts to IdentityNow for Activity Insights

To connect Workday Accounts to IdentityNow, you’ll need to configure the following sources in IdentityNow. This will allow IdentityNow to gather account information and activity data from Workday Accounts.

Configuring the Workday Accounts Identity Governance Source

Follow the directions to configure your Workday Accounts source in IdentityNow. You can also edit an existing source.

Configuring the Activity Insights - Workday Accounts Source

To display activity data from Activity Insights, you must configure the Activity Insights - Workday Accounts source in IdentityNow.

  1. Go to Admin > Connections > Sources. 

  2. Select Create New to create a new source. 

  3. Search for and select the Activity Insights - Workday Accounts connector. 

  4. Enter a name and description for the source.

  5. In the Source Owner field, begin typing the name of an owner. Matches appear after you type two letters. 

  6. (Optional) Select a governance group for source management. 

  7. Select Continue to create the source.

  8. Select Configuration from the left panel.

  9. Enter the following information: 

    • Token Endpoint - To get your Workday token API endpoint, enter "View API Clients" in the search bar and select the related task. Copy the Token Endpoint.

    • Client ID

    • Client Secret

    • Refresh Token

  10. Select Save to save these settings. 

  11. Select Review and Test from the left panel. 

  12. Select Test Connection to test the connection between the applications. You must have a successful connection for IdentityNow to gather activity data. If the test is unsuccessful, retry your credentials or contact SailPoint Support. 

To gather account data, you must correlate accounts and run an aggregation for the Workday Accounts source. Your activity data will begin syncing immediately but may take up to 24 hours to display. Data will then update daily.