Before users can connect their Workday accounts to the Workday app in Team Chat, an Admin with appropriate permissions must do some initial configuration within their Workday account. This must be performed only once for all end-users to be able to connect their accounts.

This article contains: 

• How to perform initial Workday configuration
  • Register the API Client
  • Set up Integration Security
    • Edit the Domain Security Policy
    • Create Integration System User and Security Group
    • Edit Business Process Security Policy
    • Import Workday Solution
  • Schedule Integration

Prerequisites for configuring Workday for the Workday app

• A Zoom account
• A Workday Admin with Integration Administrator and Security Administrator permissions

How to perform initial Workday configuration

Register the API Client

1. Sign in to your Workday account as an admin.
2. With the search bar in the top right corner, search for Edit tenant setup - Security.
3. Under OAuth 2.0 Settings, check the OAuth 2.0 Clients Enabled option.
4. Click OK.
5. With the search bar in the top right corner, search for and open Register API Client.
   You will be prompted to set up an API connection for the Team Chat integration.
6. For the following fields, enter the provided values:
   

   Client Name	Zoom Chat Integration
   Client Grant Type	Authorization Code Grant
   Support Proof Key for Code Exchange (PKCE)	Keep the default value (unchecked)
   Enforce 60 Minute Access Token Expiry	Keep the default value (unchecked)
   Access Token Type	Bearer
   Redirection URI	https://integrations.zoom.us/chat/ oauth/workday/authorized
   Refresh Token Timeout (in days)	Keep the default value (30 days)
   Non-Expiring Refresh Tokens	Checked
   Grant Administrative Consent	Keep the default value (unchecked)
   Disabled	Keep the default value (unchecked)
   Scope (Functional Areas)	Adaptive Planning for Financial Plans Adaptive Planning for the Workforce Public Data Staffing System Time Off and Leave Tenant Non-Configurable
   Include Workday Owned Scope	Keep the default value (unchecked)
   Restricted to IP Ranges	Keep the default value (empty)

7. Click Ok to save the API Client.
   The API client will be created and additional details will be displayed.
8. In a separate document, find and make note of the following details, which will be used in a later step:
   • Client ID
   • Client Secret
   • Workday REST API EndpointT
   • Token Endpoint
   • Authorization Endpoint
     Note: Do not yet click Done if you have not copied this information, as the Client Secret is only available once.
9. Click Done when these items are saved in the document.

Set up Integration Security

Edit the Domain Security Policy

1. With the search bar in the top right corner, search for WQL for Workday Extend.
2. Next to the WQL for Workday Extend search result, click the ellipses icon  to view the related actions menu.
3. Select Domain and then Edit Security Policy Permissions.
4. Under the Report/Task Permissions security groups, click the add icon  , search for and select All Users, and provide View access.
5. Click Enable domain.
6. Click OK to save the changes.

Create Integration System User and Security Group

1. With the search bar in the top right corner, search for and open Create Integration System User.
2. For the following fields, enter the provided values:
   • User Name: ISU INT Workday to ZoomChat Events Outbound
   • New Password / New Password Verify: Provide new strong password in both locations.
   • Do not allow UI session: Enabled (checked)
3. Click OK.
4. With the search bar in the top right corner, search for and open Create Security Group.
5. As the Type of Tenanted Security Group, select Integration System Security group (Unconstrained), then name it ISSG INT Workday to ZoomChat Events Outbound.
6. On the next screen under Integration System Users, select the ISU INT Workday to ZoomChat Events Outbound user (Created in Step 16)
7. Click OK.
8. On the resulting screen, next to the title of the newly created security group, click the ellipses icon  to view the related actions menu.
9. Click Security Group, then select Maintain Domain Permissions for Security Group
10. For each of the following access options, add the following domains:
    • Domain Security Policies permitting Modify access: Custom Report Creation
    • Domain Security Policies permitting View access: Custom Report Creation
    • Domain Security Policies permitting Put access: Integration Event
    • Domain Security Policies permitting Get access: Worker Data: Time Off, Worker Data: Time Off (Time Off), Business Process Reporting, Person Data: Work Email, Worker Data: Anniversaries/Birthdays Reports and Worker Data: Headcount Reports
11. Click OK.

Edit Business Process Security Policy

1. With the search bar in the top right corner, search for bp:Request time off.
2. Next to the Request Time Off (Default Definition) search result, click the ellipses icon  to view the related actions menu.
3. Select Business Process Policy, and select Edit.
4. Under the Who Can Do Actions on Entire Business Process section, assign the ISSG security group (created in step 13) View all access.
5. Click Ok. 
6. Repeat steps 1-5, searching for and making security policy changes for bp:Correct time off instead. 

Import Workday Solution

1. With the search bar in the top right corner, search for and open Activate Pending Security Policy Changes.
2. Enter a required comment for tracking.
3. Click OK.
   All the changes from the previous steps will be listed below.
4. Check the Confirm box and click OK to confirm the changes.
5. With the search bar in the top right corner, search for Import Solution
6. In the Solution field, enter the following as the ID: 
   

   f4079da9b17b1014910da438815d0000

7. Click OK.
8. With the search bar in the top right corner, search for intsys: INT Workday to ZoomChat Events Outbound.
9. Click … to view additional actions, then click Workday Account, and select Edit.
10. Search for and assign the ISU user (created in Step 10).
11. Click OK.
12. With the search bar in the top right corner, search for intsys: INT Workday to ZoomChat Events Outbound.
13. Click … to view additional actions, then click Integration system, and select Configure Integration Attribute.
14. For the following attribute fields, copy and paste the appropriate values from the document in step 8:
    • ClientID: Client ID generated and saved from Step 8
    • ClientSecret: Client Secret generated and saved from Step 8
    • Endpoint: https://integrations.zoom.us/chat/workday/webhook
15. Click OK.
16. In the search bar in the top right corner, search for rd: CR INT Workday to ZoomChat Events Outbound.
    Note: Steps 16-20 will be repeated for 2 other items. 
17. Next to the CR INT Workday to ZoomChat Events Outbound search result, click the ellipses icon  to view the related actions menu.
18. Select Custom Report, and then select Transfer Ownership.
19. Search for and assign the ISU user (created in Step 10).
20. Click OK.
21. Repeat steps 16-20, searching for and transferring ownership of the following items as well: 
    
    • rd:CR INT Workday to Zoomchat Anniversary Birthday Notification
    • rd:CR INT Workday to Zoomchat Time off Correction Entries

Schedule Integration

1. With the search bar in the top right corner, search for and open intsys: INT Workday to ZoomChat Events Outbound.
2. Click … to view additional actions, then click Integration, and select Launch / Schedule.
3. For Run Frequency, search for and select Minute Recurrence.
4. On the Integration Criteria tab for the following value types and value fields, provide the following information for the specified fields:
   

   Fields	Value Type	Value
   From_Moment	Determine Value at Runtime	As of Entry DateTime of Last Completed or Completed with Warnings Integration Event
   To_Moment	Determine Value at Runtime	Current Moment (DateTime)
   Concurrent Integration Scheduling	When there are in-progress integration events triggered by this schedule, allow this schedule to trigger a new integration event	Enabled
   Concurrent Integration Scheduling	Except when the integration event has all the same:	From_Moment To_Moment

5. Click the Schedule tab.
6. For the following value types and value fields, find and select the following options:
   • Recurrence Interval: Every 5 Minutes
   • Start Time: Nearest upcoming time interval
   • End Time: Keep empty
   • Time zone: Keep the default value
   • Range or recurrence - Start Date: Set the current date.
   • Range or recurrence - End Date: Set end of next calendar year.
7. Click OK.
8. On the resulting page, click … to view additional actions, select Schedule Future Process, and then click Transfer Ownership.
9. Search for and assign the ISU user (created in Step 10).
10. Click OK.

With this process complete, end-users that have installed the Workday App will be able to successfully connect their Workday account to and begin using the Workday App