Skip to main content

Workday Learning Integration Guide

Updated over a week ago

Prerequisites & Data Access

  • Admin privileges for your Workday account.

Step-by-Step Setup

Step 1: Find your Workday Tenant

  1. Log into your Workday account.

  2. Look at the address bar at the top of the browser window where the URL is displayed.

  3. Find your tenant immediately after workday.com/.

Workday Tenant


Step 2: Find the Web Services Endpoint

  1. Go to the Public Web Services report.

  2. Find Learning and hover over it to be able to interact with the menu. Via the three-dots menu, go to Web Service and click on View WSDL (note that the page may take a minute to fully load).

    WSDL Service
  3. Search for wsdl:service in the file OR navigate directly to the very bottom of the page.

    • You should see something like this:

    • WSDL Service

  4. Copy everything before service in the location attribute. Do not include the https:// prefix. In the example tenant above, this would be wd2-impl-services1.workday.com/ccx but it may be different for your tenant (e.g., wd5-services1.myworkday.com/ccx).

Step 3: Set up an Integration System User​

  1. Log in to your Workday tenant in the Workday portal. In the Search field, search for “Create Integration System User”.

    Create Integration System User
  2. Choose the “Create Integration System User” task.

  3. Enter a username and password in the Account Information section on the “Create Integration System User” page.

  4. Account Information

  5. Select OK.

  6. In the Search field, search for “Create Security Group”. Select the “Create Security Group” task.

    Create Security Group
  7. On the “Create Security Group” page, select “Integration System Security Group” from the Type of Tenanted Security Group pull-down menu. Enter a name in the Name field.

  8. Click OK.

  9. On the “Edit Integration System Security Group (Unconstrained)” page, enter the same name you used when creating the ISU in the first section.

  10. Click OK.

Step 4: Configure Domain Security Policy Permissions

  1. Edit the Domain Security Policy Permissions in the Security Group. Add the GET and PUT/Get Only operations for the following required permissions for the Learning Core as per the table below:

  2. For integrating with the Learning Core of Workday

    • Set Up: Learning Catalog

    • Reports: Learning Record

    • Manage: Learning Content

    • Person Data

      • Personal Data (Get only)

      • Name (Get only)

      • Public Work Phone Integration (Get only)

    • Worker Data

      • Work Contact Information (Get only)

      • Work Email (Get only)

      • Work Phone (Get only)

      • Public Worker Records (Get only)

The Core Permissions Should Look as Follows

Link to StackOne
Link to StackOne

Step 5: Approve the Security Policy Changes

  1. In the Search bar, search for “Activate Pending Security Policy Changes”.

  2. Review the policies that need approval in the summary of the changes in the security policy.

  3. Approve the pending security policy changes to activate them.

Step 6: Configure Business Processes

  1. In the Search bar, search for “bp: Manage Course”. Click on the matching search result.

    Search Manage Course
  2. Next to the Business Process Definition Manage Course click the kebab menu and select Business Process Policy > Edit.

    Navigate to Edit BP
  3. Add the user to the Security Groups for the initiating action Manage Learning Course (Web Service).

  4. Add the user to the Security Groups for the initiating action Cancel Learning Enrollment (Web Service) (Check with your content partner to see if this is required).

  5. Add the user to the Security Groups for the initiating action Manage Extended Enterprise Learner (Web Service) (If you are using extended enterprise learners).

Add User to Security Group

Step 7: Use Scorm Course Blocker

  1. Download this file workday-scorm-course.zip.

  2. In the Workday UI, search View Media > Create > Media Document Upload Create > Attach File and click Ok.

    Navigate to Edit BP
  3. Search View Reference IDs > Media - navigate to the correct document and copy the Reference ID.

    Navigate to Edit BP
  4. Enter these details in the account linking step. In the account linking step, enter the Reference ID.

Step 7: Connect Workday Account to Drata

  1. In Connections, select SuccessFactors.

  2. You can use the Tenant and System User credentials you created in steps 1 & 2 to link Workday.

  3. Workday offer the option for content to require enrollment before it can be accessed by a user.

  4. You can select whether to turn this on or off via the Requires Enrollment field in the account linking step.

  5. By defult this is set to Require Enrollment: Yes (Default) which is the Workday default.

  6. You can turn this off by selecting Require Enrollment: No, this will allow a user to access content without having to enroll.


Troubleshooting

If you are having trouble linking an account or creating content initially it may be due to the permissions configuration. Please check the correct permissions are configured for both PUT and GET of Learning Content and Learning Records.

Did this answer your question?