All of the data requests we make to Workday are in the form of SOAP requests, except for Time Off data. Workday only supports the full breadth of Time Off data through their REST API, which requires a different set of credentials (OAuth).
How to Get Timeoff Data from Workday:
Step 1: Follow our main Workday guide with one minor difference:
This section of the main guide says to enable GET access to the list of domains. To access Time Off data, you will need both GET and View Access to the Time Off domains.
Here are the minimum set of domains you will need enabled:
Operation | Domain Security Policy |
Get Only | Worker Data: Current Staffing Information |
Get Only | Worker Data: Public Worker Reports |
View Only | Worker Data: Public Worker Reports |
Get Only | Worker Data: Time Off |
View Only | Worker Data: Time Off |
Get Only | Worker Data: Time Off (Time Off) |
View Only | Worker Data: Time Off (Time Off) |
Get Only | Worker Data: Time Off (Time Off Balances Manager View) |
View Only | Worker Data: Time Off (Time Off Balances Manager View) |
Get Only | Worker Data: Time Off (Time Off Balances) |
View Only | Worker Data: Time Off (Time Off Balances) |
Get Only | Worker Data: Time Off (Time Off Manager View) |
View Only | Worker Data: Time Off (Time Off Manager View) |
Once you have finished the main guide, the steps below will guide you in creating an API Client that we can use to access the Time Off data.
Step 2: Create a new API Client for Integrations
In the Search field, type Register api client for integrations.
Select the Register API Client for integrations task.
On the Register API client for Integrations page, in the Client Name field, enter the client name.
Select the Non-Expiring Refresh Tokens option.
In the Scope (Functional Areas) field, select:
Click OK.
The client ID and client secret are displayed.
Save the Client Secret and Client ID.
Click Done
Enter the Client Secret and Client ID to the linking flow
Step 3: Generate a non-expiring Refresh Token
In the Search field, type View API client.
Select the View API Clients task.
On the View API Clients page, click the API Clients for Integrations tab.
Click the client you created in Create a new API Client for Integrations.
Click API Client > Manage Refresh Tokens for Integrations.
On the Manage Refresh Tokens for Integrations page, in the Workday Account field, enter the Workday account of a user who has access to the custom report.
Set up the user as a service account instead of an actual Workday user to prevent permissions being removed from the account due to a job change.
Click OK.
Return to the Workday home page.
In the Search field, type Register api client for integration.
On the Delete or Regenerate Refresh Token page, select the Generate New Refresh Token option.
Click OK.
On the Successfully Regenerated Refresh Token Page, copy the refresh token.
Click Done.
Add the Refresh Token to the linking flow.
Step 4: Find your Token Endpoint URL
Log in to the Workday tenant.
In the Search field, type View API Client.
Select the View API Clients task.
On the View API Clients page, save the URL in the Token Endpoint field.
Add the Workday OAuth Token URL to the linking flow
If you face any issues during this process, please don't hesitate to reach out to us!