Alert EnterpriseWiki

Workday (via REST API)

Workday·AE_HSc_Workday_RestConnectorGuide

HRactiveWorkday REST API version 8.4 and above
Transports
rest
Direction
bidirectional
Authentication
Workday Integration System User (ISU) credentials
Last updated
2025-04-17

Overview

The Workday REST connector integrates AlertEnterprise Guardian with Workday via Workday's RESTful APIs. Workday is the dominant cloud HCM platform in the Fortune 500 — supporting Workday is mandatory for AE in any large deployment.

This is the REST-based integration path. For the older Workday Web Service (SOAP) integration, see the hand-authored workday connector. New deployments should prefer this REST connector.

Architecture: AE → ACF (REST Connector Framework) → Workday REST Connector → Workday RESTful APIs → Workday System.

Architecture

Composed from this connector's actors + edges. Trust zones are color-coded; trust crossings render as thicker lines.

Composing diagram — running ELK layout5 actors · 4 edges

Authentication

1 method supported

Workday Integration System User (ISU) credentials
api-key

Workday authentication uses an Integration System User (ISU) credential — typically API key or basic auth depending on the Workday tenant's integration security configuration. The ISU must have an Integration System Security Group with read-access to the relevant Workday data domains (Workers, Organizations, Job Profiles, etc.).

Credential storage
Encrypted in AE connector configuration.

Prerequisites

Everything that must be in place for this connector to work, with the owner who's responsible.

Workday tenant with REST API enabled

customer

An operational Workday tenant with REST API access enabled. Tenant admin must enable API access at the appropriate version (8.4+).

Workday Integration System User (ISU) with required scopes

customer

ISU configured in Workday with an Integration System Security Group granting access to the Worker / Organization / Job Profile / Position data domains the connector consumes.

HR specifics

Sync model
Sync modes
full-load · delta
Scheduled sync
configurable
Direction
inbound
Contingent worker support
Yes
Lifecycle events
hirerehiretransferpromotiondemotionleavereturn-from-leaveterminationtitle-changemanager-changelocation-change
Field mapping notes

Workday's standard Worker object — workerID, employeeID, firstName, lastName, preferredName, hireDate, terminationDate, employmentStatus, jobProfile, supervisoryOrganization, manager, location, costCenter. Customers extending with Workday's custom fields configure additional mappings in AE.

Bulk operations

Workday REST API supports bulk worker extraction with pagination.

Source materials
  • src/connectors/workday-rest/source.pdf Full connector guide — 24 pages, updated 2025-04-17
  • src/connectors/workday-rest/source.pdf p5 — Supported Version
Verifying access
Desktop only

The AE Mobile Wiki needs a bigger screen.

The diagrams, comparisons, and animated flows aren't built for phones. Open this link on your laptop or desktop browser and you'll see the full reference.

wiki.alertenterprise.app

Same Google sign-in as the AE App Hub — you'll be in once you open it on a larger screen.