This article applies to:
Admins
Premium Procurement
Estimated time: Less than 20 mins
About this article
Automatically provision and de-provision users in Vendr using Workday. This article covers installing the integration.
How it works
The Workday integration syncs your Workday users into Vendr in just a few clicks. Connecting Vendr to your Workday instance lets you quickly deploy Vendr across your entire organization. Whenever a user is added or leaves your organization, they'll automatically be added or removed from your Vendr organization.
Common uses of the Workday integration
Automatically provide access to Vendr to all of your employees
Provide access to Vendr in a few clicks and keep those users in sync with your Workday directory.
Sync key employee details
Effortlessly sync key employee details such as Name, Email, Title, and Manager from Workday to Vendr with just a few clicks.
Assign approval steps in procurement requests to an employee's manager.
Streamline the approval process by ensuring tasks are routed to the appropriate stakeholders for review.
Requirements
Must be a Vendr admin
Must be a Workday admin
Do not have an Identity Provider integration already installed in your Vendr organization
CAUTION
You can only connect an HR integration or an Identity Provider. You cannot have both connected at the same time. If you already have an identity provider like Okta, we recommend you connect your identity provider instead of your HR system for the most flexible user management experience.
Overview
To give users access to Vendr for seamless account provisioning and de-provisioning using Workday, you will:
Create an Integration System User (ISU)
Log into your Workday tenant
In the Search field, type Create Integration System User
Select Create Integration System User task
On the Create Integration System User page, in the Account Information section, enter a user name, and enter and confirm a password.
Click OK
NOTE
You'll want to add this user to the list of System Users to make sure the password doesn't expire.
Assign the Integration System User
Now, add this Integration System User to a Security Group:
In the Search field, type Create Security Group
Select the Create Security Group task
Click OK and then on the Create Security Group page, from the Type of Tenanted Security Group pull-down menu, select Integration System Security Group
In the Name field, enter a name
Click OK. Then on the Edit Integration System Security Group (Unconstrained) page, in the Name field, enter the same name you entered when creating the ISU in the previous step.
Click OK and then In the Security Group, you will need to edit the Domain Security Policy Permissions and add the following GET operations.
In the search bar, type Activate Pending Security Policy Changes to view a summary of the changes in the security policy that needs to be approved. After reviewing policies, approve the pending security policy changes in order to activate them.
Get the Web Services Endpoint
We'll need access to your specific Workday web services endpoint:
Search in Workday for Public Web Services.
Open Public Web Services Report.
Hover over Human resources and click the three dots to access the menu.
Click Web Services > View WSDL.
Navigate to the bottom of the page that opens and you'll find the host.
Copy everything until you see /service. This should look something like https://wd5-services1.myworkday.com/ccx.
NOTE
The password used cannot contain an "&" sign. Please make sure to exempt the ISU Account from MFA and SSO
Install the integration
Navigate to Vendr and then select admin and then all integrations
Select Workday from the HRIS and click Integrate
Review the data the integration will have access to, then click Continue.
Enter your Workday Web Services Endpoint URL then click Submit.
Enter the credentials for the Integration System User in Workday then click Submit.
Enter your Workday Tenant Name
Click Finish Setup.
🎉 Congrats! Your integration is now connected.
Permissions
Vendr only accesses the following data from your Workday organization.
👁️ Vendr will be able to view:
Data about your employees
Data about your employee's employment
Data about your teams
Data about your groups
🫳 Vendr will be able to do:
Nothing