Connecting Workday Learning to Drata enables evidence collection and monitoring for learning- and training-related compliance requirements.
Prerequisites
Admin privileges for your Workday account
Ability to create an Integration System User (ISU)
Approval rights for security policy changes
Step-by-Step Setup
Step 1: Find Your Workday Tenant
Your Workday tenant is included in the URL you use to access Workday.
Example:
https://wd2-impl.workday.com/<tenant-name>
Copy the tenant name.
Expected outcome: You have your Workday tenant name ready for the Drata connection setup.
Step 2: Find the Web Services Endpoint
Drata requires the Workday Learning web service endpoint (WSDL) to establish the integration. To locate it:
In Workday, open the Public Web Services report.
Locate the Learning (Public) service.
Select the ellipsis menu (⋯) then choose Web Service → View WSDL
In the WSDL file, search for
wsdl:serviceor scroll to the bottom
Find the
locationURL, which will look similar to:<soapbind:address location="https://wd2-impl-services1.workday.com/ccx/service/zktechnology_pt1/Learning/v2.1"/>
Copy the URL up to
/service/, excluding thehttps://prefix.For example:
wd2-impl-services1.workday.com/ccx
Expected outcome: You have the correct Learning web services endpoint required to complete the integration.
Step 3: Set up an Integration System User
In Workday, search for Create Integration System User
Enter a username and password
Select OK.
Step 4: Add the Integration System User to a Security Group
In the Workday search field, search for and select Create Security Group.
On the Create Security Group page:
From the Type of Tenanted Security Group drop-down menu, select Integration System Security Group.
Enter a name in the Name field.
Click OK.
On the Edit Integration System Security Group (Unconstrained) page:
Enter the same name you used when creating the Integration System User (ISU) in the previous step.
Click OK.
Expected outcome: The Integration System User is now associated with an Integration System Security Group and ready for permission configuration.
Step 5: Configure Domain Security Policy Permissions
Edit the Domain Security Policy Permissions for the Integration System Security Group.
For each domain listed below, add the Get Only operation (or Get where applicable) to enable integration with the Learning Core in Workday.
Important: Drata’s Workday Learning integration requires GET-only permissions for all listed domains. Drata does not require PUT or other write permissions to fetch worker records, enrollments, or course data.
Category | Required Permissions |
Learning | - Set Up: Learning Catalog |
Person Data | - Personal Data (Get only) |
Worker Data | - Work Contact Information (Get only) |
Note:
GET access is required for evidence collection and monitoring
Step 6: Approve the Security Policy Changes
In Workday, search for and select Activate Pending Security Policy Changes
Review the pending changes
Approve to activate the policies
Step 7: Connect Workday Account to Drata
In Drata, navigate to Connections
Select Workday
Enter your Tenant and Integration System User credentials
After your account is connected, you’ll configure how Workday learning content is accessed during training workflows.
Requires Enrollment Setting
Workday allows organizations to control whether users must be enrolled in a course before accessing its content. This setting determines how Drata interacts with Workday Learning when assigning or tracking training.
You can select whether to turn this on or off via the Requires Enrollment field in the account linking step.
Require Enrollment: Yes (Default): Matches Workday’s default behavior. Users must be enrolled in a course before they can access the content.
Require Enrollment: No: Allows users to access course content without first enrolling.
Troubleshooting
If you are having trouble linking an account or syncing learning data, it may be due to the permissions configuration. Please check the correct permissions are configured for GET of Learning Content and Learning Records.