Workday IDP/HRIS Integration

If your organization uses Workday as an HR Provider, you can additionally designate it as an IDP/HRIS Integration. Doing so allows Opal to sync your Workday identities and their attributes, on top of syncing and managing access to entitlements (e.g. Workday Security Groups, Workday Organization Roles, etc).

Getting Started

Before you set up Workday as your IDP, you must first create an Workday Directory App in Opal. To do this, please follow the instructions here.

Next, set up Workday as your IDP by following instructions here:

HRIS/User Attribute Source Configuration

To configure Workday as an attribute source in Opal, navigate to Settings > IDP & HR Integrations and select your existing Workday connection as an IDP/HRIS provider.

Attributes ingested by default

The following attributes are ingested from Workday by default. These attributes can be mapped to Opal's user attributes in the IDP/HRIS settings page:

Workday AttributeDefault Opal MappingDescription
emailEmailThe user's email address.
remoteID-Workday object WID.
employeeID-The user's employee ID.
firstName-The user's first name.
lastName-The user's last name.
managerEmailManagerThe email address of the user's manager.
position-The user's job position.
workLocation-The location where the user works.
businessTitleTitleThe user's business title.
employeeType-The type of employment (e.g., full-time, part-time).
employeeTimeType-The time type of the employee (e.g., regular, contract).
hireDate-The date when the user was hired.
managementLevel-The management level of the user.
organizationTeamThe organization to which the user belongs.
onLeave-Indicates whether the user is currently on leave.
active-Indicates whether the user is an active worker.
secondaryEmails-Comma-separated list of user's contact emails.

Note: In addition to the attributes listed above, Opal also ingests the worker's provisioning status and secondary email addresses. These attributes are automatically mapped to Opal's system attributes.

You can customize these mappings based on your organization's specific requirements by visiting the IDP/HRIS settings page. Ensure that the attributes are correctly mapped to ensure accurate data synchronization between Workday and Opal.

Ingest Custom Attributes

To ingest custom attributes from Workday into Opal, you need to configure the Workday integration system using the Field Override Service. Follow the steps below to set up and map custom attributes effectively:

Step 1: Create a Field Override Service

  1. Access Integration Configuration:

    • Log in to Workday and navigate to the integration configuration section.
  2. Initiate Field Override Service:

    • Search for and select "Create Integration Field Override Service."
    • Start a new Field Override Service setup.
  3. Configure Service Details:

    • Assign a meaningful name to the Field Override Service.
    • Choose the "Worker" business object to associate with the service.
  4. Add and Define Fields:

    • Click the "Plus" icon to add new fields.
    • Enter names for each custom field that correspond to your desired attributes in Opal.
    • Define the necessary settings for each field.
  5. Save Configuration:

    • Click "OK" to save each field entry.
    • Click "Done" once all fields are added and configured.

Step 2: Set Up the Integration System

  1. Create New Integration System:

    • From the Workday Home page, go to Integration System and select Create Integration System.
  2. Name and Template:

    • Provide a name for your new Integration System.
    • Choose New Using Template and select Document Transformation as the template.
    • Confirm by clicking "OK."
  3. Attach Integration Service:

    • Navigate to Actions > Integration System > Configure Integration Attachment Service.
    • Create an Integration Attachment Service by selecting the "Attachment" column and choosing Create Integration Attachment Service.
    • Attach an empty text file and confirm by clicking "OK."
  4. Incorporate Field Override Service:

    • Go to Custom Integration Services in your new Workday Integration System.
    • Click the "Plus" icon to add the Field Override Service created earlier.
    • Confirm by clicking "OK."
  5. Record System ID:

    • Note the System ID for the Integration System; it is needed for retrieving custom attributes.

Step 3: Map and Configure Attributes

  1. Locate Integration System:

    • Search for View Integration System.
    • Enter the name of the Integration System you created and select "OK."
  2. Map Custom Fields:

    • Go to Integration System > Configure Integration Field Overrides.
    • Find the custom or calculated fields and map them to the correct values in the "Override External Field" section.
    • Click "OK" to save the mappings.
  3. Finalize Setup:

    • Click "Done" to complete the setup process.

Step 4: Link the Integration System to Opal

  1. Locate Integration System:
    • Search for View Integration System.
    • Enter the name of the Integration System you created and select "OK."
  2. Locate and Copy Integration System ID:

  1. Add the Integration System ID in your Opal Workday Connection

  1. Configure Attribute Mappings in Opal
    • In Opal, navigate to Settings > IDP & HR Integrations
    • Custom attributes can now be imported, using your configured field name as key

What’s Next

Check out how to use Opal to manage access to Workday entitlements