Prerequisites & Data Access
Admin privileges for your Workday account.
Step-by-Step Setup
Step 1: Find your Workday Tenant
Log into your Workday account.
Look at the address bar at the top of the browser window where the URL is displayed.
Find your tenant immediately after
workday.com/.
Step 2: Find the Web Services Endpoint
Go to the
Public Web Servicesreport.Find Learning and hover over it to be able to interact with the menu. Via the three-dots menu, go to
Web Serviceand click onView WSDL(note that the page may take a minute to fully load).Search for
wsdl:servicein the file OR navigate directly to the very bottom of the page.Copy everything before
servicein the location attribute. Do not include thehttps://prefix. In the example tenant above, this would bewd2-impl-services1.workday.com/ccxbut it may be different for your tenant (e.g.,wd5-services1.myworkday.com/ccx).
Step 3: Set up an Integration System User
Log in to your Workday tenant in the Workday portal. In the Search field, search for “Create Integration System User”.
Choose the “Create Integration System User” task.
Enter a username and password in the Account Information section on the “Create Integration System User” page.
Select OK.
In the Search field, search for “Create Security Group”. Select the “Create Security Group” task.
On the “Create Security Group” page, select “Integration System Security Group” from the Type of Tenanted Security Group pull-down menu. Enter a name in the Name field.
Click OK.
On the “Edit Integration System Security Group (Unconstrained)” page, enter the same name you used when creating the ISU in the first section.
Click OK.
Step 4: Configure Domain Security Policy Permissions
Edit the Domain Security Policy Permissions in the Security Group. Add the GET and PUT/Get Only operations for the following required permissions for the Learning Core as per the table below:
For integrating with the Learning Core of Workday
Set Up: Learning Catalog
Reports: Learning Record
Manage: Learning Content
Person Data
Personal Data (Get only)
Name (Get only)
Public Work Phone Integration (Get only)
Worker Data
Work Contact Information (Get only)
Work Email (Get only)
Work Phone (Get only)
Public Worker Records (Get only)
The Core Permissions Should Look as Follows
Step 5: Approve the Security Policy Changes
In the Search bar, search for “Activate Pending Security Policy Changes”.
Review the policies that need approval in the summary of the changes in the security policy.
Approve the pending security policy changes to activate them.
Step 6: Configure Business Processes
In the Search bar, search for “bp: Manage Course”. Click on the matching search result.
Next to the Business Process Definition
Manage Courseclick the kebab menu and select Business Process Policy > Edit.Add the user to the Security Groups for the initiating action
Manage Learning Course (Web Service).Add the user to the Security Groups for the initiating action
Cancel Learning Enrollment (Web Service)(Check with your content partner to see if this is required).Add the user to the Security Groups for the initiating action
Manage Extended Enterprise Learner (Web Service)(If you are using extended enterprise learners).
Step 7: Use Scorm Course Blocker
Download this file workday-scorm-course.zip.
In the Workday UI, search View Media > Create > Media Document Upload Create > Attach File and click Ok.
Search View Reference IDs > Media - navigate to the correct document and copy the Reference ID.
Enter these details in the account linking step. In the account linking step, enter the Reference ID.
Step 7: Connect Workday Account to Drata
In Connections, select SuccessFactors.
You can use the Tenant and System User credentials you created in steps 1 & 2 to link Workday.
Workday offer the option for content to require enrollment before it can be accessed by a user.
You can select whether to turn this on or off via the Requires Enrollment field in the account linking step.
By defult this is set to
Require Enrollment: Yes (Default)which is the Workday default.You can turn this off by selecting
Require Enrollment: No, this will allow a user to access content without having to enroll.
Troubleshooting
If you are having trouble linking an account or creating content initially it may be due to the permissions configuration. Please check the correct permissions are configured for both PUT and GET of Learning Content and Learning Records.












