Workday integration

Overview

Workday is an enterprise HCM + Finance platform. The Automize Workday connector covers workers, organisations, job profiles, time off, payroll, and Reports-as-a-Service (RaaS) for custom report runs.

• Regions: Each Workday tenant has a unique URL (yourcompany.workday.com) and region. Connector pins to one tenant per connection.
• Plans: Workday is enterprise-only. API access via the integration system – setup typically involves your Workday admin team.

Setting up the connection

Auth type: OAuth 2.0 (Client Credentials).

1. Ask your Workday admin to register an API Client (Setup → Register API Client for Integrations).
2. Set scope to Workday WQL + RaaS + Custom Domain as needed.
3. Workday returns Client ID + Client Secret + Refresh Token + Endpoint URL (tenant-specific).
4. In Automize, open Settings → Connectors → Workday → Add connection. Paste all four.
5. Workday auth is OAuth 2 Client Credentials with token refresh – no user sign-in.

Find your credentials at https://www.workday.com/.

Rate limits

Workday enforces tenant-scoped concurrency limits (varies by tenant size). Connector retries 429 with backoff. For bulk loads use RaaS reports (single call returns a large dataset) instead of per-worker gets.

Data model

Workday primitives:

    Worker (employee/contractor) ─┬─ Job Profile (role/title)
                                  ├─ Organization (department/team)
                                  ├─ Time Off (PTO requests)
                                  └─ Compensation (pay, currency)
    Payroll ── period totals + per-worker breakdowns
    RaaS Reports – arbitrary user-defined reports, callable by name

Available operations

7 operations available. Click any row to jump to its detail.

Operations

Get Payroll Results

Get payroll results for a period

No input parameters.

Tips

• Returns payroll results for a period – totals, per-worker pay, tax breakdowns. Subject to scope grants from your Workday admin.

Get Worker

Get worker details

Tips

• worker_id (Workday's internal ID, not Employee ID). Returns full profile incl. compensation if scopes allow.

List Job Profiles

List job profiles

No input parameters.

Tips

• Job profiles are templates (e.g. 'Senior Software Engineer'). Workers are assigned a profile.

List Organizations

List organizations

No input parameters.

Tips

• Org structure tree. Each org has type (Company, Cost Center, Department, etc.) + members.

List Time Off Requests

List time off requests

No input parameters.

Tips

• Filter by worker, status (approved, pending, denied), date range.

List Workers

List all workers

No input parameters.

Tips

• Default returns active workers. Use Get Worker for full profile.
• Page via offset + limit.

Run Report

Execute a custom RaaS report

Tips

• Execute a RaaS-enabled custom report by name.
• Workday returns the report's full data set – sometimes large. Pass format=json for parseable output.

FAQ

How do I get a refresh token initially?

Workday's API client setup gives you one. The connector handles refresh thereafter – refresh tokens last 1 year by default.

RaaS reports – how do I make them?

Built inside Workday Report Writer by your finance/HR team. They mark a report as 'Web Service Enabled' which exposes it via RaaS. You then call by report name.

Why does Get Worker fail with 'permission denied'?

Workday's permission model is fine-grained. Your API client's security group must include the specific worker data + compensation domains. Talk to your Workday admin.

Sandboxes – different tenant?

Workday Implementation/Sandbox tenants have separate URLs (yourcompany-implsbx.workday.com). Create separate Automize connections.

Related connectors

• Bamboohr
• Deel
• Payspace
• Dynamics365