"Workday is a human capital management, and student information system software vendor."
Reference: OAuth 2.0 Refresh Token Specification, Generate a non-expiring refresh token in Workday, Copy the client ID and client secret in Workday, API Documentation for SOAP-based web services for Workday
Pre-Requisites: An existing Workday deployment and admin privileges.
Setting up Workday
Create a client ID and client secret
- In the Search field, type Register api client for integrations.
- Select the Register API Client for integrations task.
- On the Register API client for Integrations page, in the Client Name field, enter the client name.
- Select the Non-Expiring Refresh Tokens option.
- In the Scope (Functional Areas) field, select Tenant Non-Configurable.
- Click OK.
- Copy the Client Secret and Client ID.
- Click Done.
Create non-expiring refresh token
In order to integrate with both Workday’s REST and SOAP APIs, crul will need to be able to authenticate remotely using a specially configured refresh token.
This option relies on the OAuth flow, but requires the refresh token to either never expire, or issue a fresh refresh token on each refresh request.
The non-expiring refresh token is needed to provision REST/SOAP to access Workday custom reports.
In the Search field, type View API client.
Select the View API Clients task.
On the View API Clients page, click the API Clients for Integrations tab.
Click the client you created in Create a client ID and client secret
Click API Client > Manage Refresh Tokens for Integrations.
On the Manage Refresh Tokens for Integrations page, in the Workday Account field, enter the Workday account of a user who has access to the custom report. Set up the user as a service account instead of an actual Workday user to prevent permissions being removed from the account due to a job change.
Return to the Workday home page.
In the Search field, type Register api client for integration.
On the Delete or Regenerate Refresh Token page, select the Generate New Refresh Token option.
On the Successfully Regenerated Refresh Token Page, copy the refresh token.
Configuring Workday OAuth Credentials in crul
Navigate to the credentials page in crul (top right corner menu credentials).
Click the create button.
Select Workday from the type dropdown.
Enter the Workday Token host and Token path, values into the credentials form entry. Often this is in the form of
Enter the client_id, client_secret and refresh_token previously copied values into credentials form entry.
Click the create button.
Test the credential by running the following query. You should see a populated
token.access_token column in the results.
oauth --credential "workday"