How can we help?

Workday Integration

Noga Tubi
Noga Tubi
  • Updated

Set up your Workday integration and get all the insights in Torii's dashboard

Workday Report-as-a-Service (RaaS) is a feature that exposes reports as web services. Torii syncs the list of users from your Workday configured report.

Setup your Workday integration

Step 1: Log in to the Workday tenant using an administrator account.

Step 2: Create an Integration System User (ISU).

  1. In the Search field, type “Create Integration System User”.

  2. Select the Create Integration System User task.

  3. Complete the Create Integration System User task by supplying, in the Account Information section, a User Name and Password for a new Integration System User.

  4. Make sure that you leave the Require New Password at Next Sign unchecked and leave the Session Timeout Minutes with its default value of 0.

Step 3: Create a Security Group and assign the Security Group to the ISU.

  1. In the Search field, type “Create Security Group”, and then click Create Security Group task.

  2. On the Create Security Group page, from the Type of Tenanted Security Group dropdown menu, select Integration System Security Group (Unconstrained).

  3. In the Name field, enter a name: torii-security-group.

  4. After the Security Group successfully created, you will see the Edit Integration System Security Group (Unconstrained) page, where you can assign members to the Security Group.

  5. In Group Criteria section, add the new ISU, created in step 2, to the Integration System Users list of this security group.

Step 4: Configuring domain security policy permissions.

List of domains:

  • Workday Accounts

  • Worker Data Public Worker Reports

  • Person Data Work Contact Information

  • Worker Data Current Staffing Information

  • Worker Data All Positions

  • Worker Data Business Title on Worker Profile

  1. In the Search field, type and select “Domain Security Configuration”.

  2. In the Domain field, search the Domain from the table, select the result and select OK.

  3. Select the 3-dots symbol (...) next to the Domain name and select Actions > Domain > Edit Security Policy Permissions

  4. On this page, under Integrated Permissions, add the Security Group created in the previous step (torii-security-group) and select the checkbox in the Get permission column.

  5. Select OK, then Done on the next screen to complete the configuration.

  6. Repeat steps 1-5 for all the domains in the list above and for any other domains whose fields you want to import from Workday to Torii.

  7. If an alert to Activate Pending Security Policy Changes is displayed, do this after all domains have been updated for the security changes to take effect immediately (see step 5).


(picture for illustration)


Step 5: Activate security policy changes.

  1. In the Search field, type “Activate Pending Security Policy Changes”, and click that task.

  2. For auditing purposes, you will be asked to enter a comment. Enter Activating security policy changes for Workday integration with Torii, and then click OK.

  3. On the next screen, check the Confirm checkbox and click OK.

Step 6: Create Custom Report.


  1. In the Search field, type “Create Custom Report”.

  2. On the Create Custom Report page, type in the Report Name: torii-report.

  3. Select Report type to be Advanced.

  4. Mark the Enabled As Web Service check box and Optimized for Performance check box.

  5. Select as a Data Source: All Active and Terminated Workers.

  6. Click OK.

  7. In the Additional Info section, click on Columns.

  8. Click + to add a column tab. Each column tab is a report field in the custom report. The report should include the information as described below.

  9. Please enter in the Field and in the Column Heading override XML Alias columns, the same (XML) value, for example: email_address.

  10. Click OK.


The report should include the following information. Note that fields must have the exact field name as shown in the following table:

Field name


Type & Example



Worker's ID


Example: "1560"



Worker's (work) email address

String containing a valid email address.

Example: ""



Attribute identifying whether the Worker is active

Boolean number.

Example: "1" or "0"



Worker's first name


Example: "Steve"



Worker's last name


Example: "Miller"



Worker's (personal) email address

String containing a valid email address

Example: ""



Attribute identifying whether the Worker is currently retired

Boolean number

Example: "1" or "0"



Most recent hire date for the Worker

Date (ISO 8601)




Worker's end of employment date

Date (ISO 8601)




Worker's role


Example: "CEO"



Worker's department


Example: "Marketing"



Worker's manager primary email address

String containing a valid email address

Example: ""





Worker's location


Example: "ES Barcelona"



Worker's preferred name


Example: "Steve Miller"



Worker's worker type


Example: "Worker"



Worker's employee type


Example: "Employee"


Step 7: Add an authorized user.

  1. In the Search field, type “View Custom Report”.

  2. In the View Custom Report field, enter the name of the created custom report.

  3. Select the report from the search results and click OK.

  4. On the report summary screen, click Action > Custom Report > Edit.

  5. In the Additional Info section, click Share.

  6. In the Report Definition Sharing Options section, select the Share with specific authorized groups and users option.

  7. In the Authorized Users field, enter the username of the Integration System User (ISR) that was created on step 2.

  8. Click Enter and OK.

Step 8: Get the report URL.

  1. In the Search field, type “View custom report”.

  2. On the View Custom Report page, click My Reports.

  3. Select the torii-report report and click OK.

  4. On the View Custom Report page, click Actions > Web Service > View URLs.

  5. On the View URLs Web Service page, in the JSON section, right-click JSON, then select Copy URL.

JSON endpoint example


Step 9: Check your credentials and report.

  1. Make sure the copied report URL, includes format=json.

  2. Test the report URL by pasting it into a new browser session. An alert box should popup and ask for the ISU username/password credentials you have configured.

  3. If the file lists all users and values for all fields visible to the report user - you're all good. Otherwise, check if you entered incorrect credentials, or if expected fields from Workday are not showing up in the report, you should probably check the report user (the ISU created on step 2) has appropriate permissions to read all included fields.


Step 10: Connect Workday integration to Torii.

  1. Go to Torii Integrations page and click on the Workday tile in order to connect.

  2. Provide:

  • Username - Enter the username of the Integration System User created on step 2.

  • Password - Enter the password of the Integration System User created on step 2.

  • Report URL - Enter the report URL from step 8.


You can always contact our support team for help at

Was this article helpful?

0 out of 0 found this helpful

Have more questions? Submit a request