​
Overview

To authenticate with Workday, you need:
  1. Hostname - The base URL for the Workday Web Services endpoint.
  2. Tenant - The unique identifier for your Workday instance, often included in the URL.
  3. Username - The Workday Integration System User (ISU) username.
  4. Password – The password for the ISU user, used in combination with the ISU username to authenticate API requests to Workday.
This guide will walk you through finding or generating these credentials within Workday.

​
Prerequisites:

  • You must have an account with Workday with administrator access.

​
Step 1: Finding your Hostname

  1. Log in to your Workday instance.
  2. In your Workday homepage, go to the search bar and type View API Clients then select it.
  3. Look for the Workday REST API Endpoint field.
  4. The Hostname is everything after https:// and before /ccx/api/v1/.
  • Example: If the endpoint is https://wd2-impl-services1.workday.com/ccx/api/v1/acme, the hostname is wd2-impl-services1.workday.com.

​
Step 2: Finding your Tenant

  1. In the same Workday REST API Endpoint field from the View API Clients report, the Tenant is the final part of the URL after /v1/.
  • Example: If the endpoint is https://wd2-impl-services1.workday.com/ccx/api/v1/acme, the Tenant is acme.

​
Step 3: Create Integration System User (ISU)

  1. Log into your Workday instance.
  2. In your Workday homepage, go to the search bar and type Create Integration System User then select it.
  1. Add in a Username and type in a secure Password of your choosing. Uncheck the box: Require New Password at Next Sign In, then click Done.
  1. Confirm the ISU account has been created by viewing All Workday Accounts and filter on the Username you created.
5.Go to the search bar and type Create Security Group then select it.
Creating a security group allows you to assign the necessary permissions to the ISU account
6. When creating the group, the group must be of type Integration System Security Group (Unconstrained). Add in a Name for the group and click OK.
  1. Assign the ISU account we created in step 3 above to your new security group and click OK.
  1. Go to the search bar and type View Security Groups for User then select it.
  1. In the Person field, search for the ISU username we created above and click OK.
  1. You should see the security groups associated with the ISU account, including the one you just created (Integration System Security Group (Unconstrained)). Scroll down to find this security group, then click on it.
  2. Navigate to ellipses > Security Group > Maintain Domain Permissions for Security Group.
  1. Add all of the required domain security policies with the proper view/modify access for the Integration Permissions.
    In Workday, all security changes remain pending until they are activated by a user with the appropriate permissions.
  2. Activate your security policy changes by;
  • Go to the search bar and type Activate Pending Security Policy Changes then select it.
  • Enter a comment and click OK.
  • You will see a list of changes that were made. You must check the Confirm box and click OK.

​
Step 4: Generating your Username

  • This is the Username from the Integration System User (ISU) you created above, followed by @ and your Workday tenant name from above.
  • Format: username@yourtenant
  • Example: ISU Nango@acme

​
Step 5: Finding your Password

  • This is the Password you set when creating the Integration System User (ISU) above.

​
Step 6: Enter credentials in the Connect UI

Once you have your Hostname, Tenant, Username and Password:
  1. Open the form where you need to authenticate with Workday.
  2. Enter your Hostname, Tenant, Username and Password in their designated fields.
  3. Submit the form, and you should be successfully authenticated.
You are now connected to Workday.