Page Comparison

The EmpowerID Workday connector is a read-only connector that uses the SCIM 2.0 protocol to allow you to bring the Connector functions as a bridge, enabling the smooth transition of user data from a Workday cloud instance to EmpowerID, where it can be used to provision EmpowerID Persons, and be synchronized with data in any . Utilizing the SCIM 2.0 protocol, the connector is capable of provisioning EmpowerID Persons and sustaining data synchronization across all connected back-end user directories.

The Workday connector is This connector's architecture comprises two core components: an EmpowerID microservice that you deploy to deployed on an Azure app service, which in turn retrieves and an EmpowerID account store specifically designed for storing and synchronizing identity information from Workday. The Azure app service uses is engineered to function using a system-assigned managed identity linked , which is tied to an application you create in Azure AD application explicitly created for EmpowerID. The managed identity is used to allow This setup enables the Workday microservice to access Azure AD-protected services securely without needing to supply requiring explicit credentials for authentication. The entire process uses secure To ensure a high degree of security throughout this interaction, client certificate authentication is employed.

...

Inventory Objects and their corresponding components in EmpowerID

Connects to the Human Resource service and retrieves Worker data.

Object in Workday	Component in EmpowerID
UserWorker	Account

Attribute Mapping

The table below table shows the attribute mappings of Workday users to EmpowerID.

...

Workday Attribute

...

SCIM Attribute

...

EmpowerID Person Attribute

...

Country_Reference.ISO_3166-1_Alpha-2_Code

...

addresses[?@.type=="BUSINESS"].country

...

Country

...

Business_Site_Summary_Data.Name

...

siteName

...

JobLocationName

...

Organization_Data.Organization_Name.COST_CENTER

...

Organization[?(@.organizationType=='COST_CENTER')].organizationName

...

CostCenter

...

Organization_Data.Worker_Organization_Data.Cost_Center_Reference_ID

...

['urn:ietf:params:scim:schemas:extension:AdAdditionalData:2.0:User']['WorkDayDataExtension']['departmentNumber']

...

DepartmentNumber

...

Organization_Data.Organization_Name.Division

...

Organization[?(@.organizationType=='Division')].organizationName

...

Division

...

Worker_Data.Worker_ID

...

urn:ietf:params:scim:schemas:extension:enterprise:2.0:User.EmployeeNumber

...

EmployeeNumber

...

Attributes marked with N/A* are supported but are not specifically mapped to corresponding EmpowerID Person Attributes. To map these attributes, the EmpowerID Schema needs to be extended. For information on extending the schema for Workday, see https://dotnetworkflow.jira.com/wiki/spaces/EIDADV23/pages/3176988713/Inventory+Workday+Custom+Attributes#Configure-EmpowerID-for-the-Workday-Custom-Attributes.

Personal Data

Workday Attribute	SCIM Attribute	EmpowerID Person Attribute
First_Name	name.givenName	FirstName

Legal

Last_Name

_Data.Name_Detail_Data.

	name.familyName	LastName
Middle_Name	name.middleName	MiddleName

Legal

Formatted_Name

_Data.Name_Detail_Data.Last_Name

name.familyName

LastName

Preferred_Name_Data.Name_Detail_Data.First_Name

nickName

PreferredFirstName

Preferred_Name_Data.Name_Detail_Data.Last_Name

preferredLastName

PreferredLastName

Address_Data.Municipality

addresses

	displayName	DisplayName
CountryOfBirth	AdditionalDataExtension.CountryOfBirth	N/A*
Citizenship	AdditionalDataExtension.Citizenship	N/A*
Email_Address	emails[?(@.type=='

BUSINESS

work')].

locality

value

City

Country_Region_Descriptor

addresses

Email
PhoneData.PhoneNumber.Communicationtype=FAX	phoneNumbers[?(@.type=='

BUSINESS

fax')].

region

value

State

Address_Data.Postal_Code

addresses

Fax
PhoneData.Phonenumber.Communicationtype=HOMEPHONE	phoneNumbers[?(@.type=='

BUSINESS

home')].

postalCode

value

PostalCode

Address_Data.AddressLineData

addresses

HomeTelephone
NumberData.Phonenumber.Communicationtype=MOBILENUMBER	phoneNumbers[?(@.type=='

BUSINESS

mobile')].

streetAddress

value

StreetAddress

MobilePhone
PhoneData.PhoneNumber.Communicationtype=WORK	phoneNumbers[?(@.type=='work')].value	BusinessPhone

Position

Employment Data

Workday Attribute	SCIM Attribute	EmpowerID Person Attribute
Worker_Status_Data.

Business_Title

Active

title

active

Jobtitle

Status

Organization

Worker_Status_Data.

Organization_Name.COMPANY

Organization[?(@.organizationType=='COMPANY')].organizationName

Company

Original_Hire_Date	hireDate	OriginalHireDate
Worker_

Type

Status_

Reference

Data.

Employee

Hire_

TypeID

Date

userType

hireDate

EmployeeType

ExpectedHireDate

Worker_Status_Data.

User

Termination_

ID

Date

userName

terminationDate

LogonName

TerminationDate

Worker_Status_Data.

Active

active

Status

Rehire	AdditionalDataExtension.RehireFlag	If set to Y, the Person is directed through the Rehire Workflow.
Worker_Status_Data.Terminated	Terminated	If set to true this value is used to terminate the Person in EmpowerID.
Worker_Status_Data.Hire_

Date

Rescinded

hireDate

HireDate

HireRescinded	If set to true, accounts linked to the EmpowerID Person are disabled.
Worker_Status_Data.

Termination Date

terminationDate

TerminationDate

Manager_as_of_last_detected_manager_change_Reference. EmployeeID

['urn:ietf:params:scim:schemas:extension:enterprise:2.0:User']['manager']['value']

ManagerPersonID

FirstName, Lastname

displayName

DisplayName

Country_Reference.ISO_3166-1_Alpha-3_Code

addresses[?(@.type=='BUSINESS')].country

Country

Email_Address_Data.Email_Address

emails[?(@.type=='work')].value

Email

PhoneData.PhoneNumber.Communicationtype=FAX

phoneNumbers[?(@.type=='fax')].value

Fax

PhoneData.Phonenumber.Communicationtype=HOMEPHONE

phoneNumbers[?(@.type=='home')].value

HomeTelephone

NumberData.Phonenumber.Communicationtype=MOBILENUMBER

phoneNumbers[?(@.type=='mobile')].value

MobilePhone

PhoneData.Phonenumber.Communicationtype=TELEPHONE

phoneNumbers[?(@.type=='other')].value

Telephone

name.honorificSuffix

GenerationalSuffix

WorkerData.User_ID

externalId

EmailAlias

Leave_Status_Data	OnLeave	If set to Y, the EmpowerID Person is directed to the On Leave workflow. Accounts can be disabled as needed.
Worker_Status_Data.Secondary_Termination_Reasons_Data	TerminationReason	N/A*
Worker_Job_Data.Position_Data.Business_Title	Title	Title

Organization Data

Workday Attribute	SCIM Attribute	EmpowerID Person Attribute
Organization_Data.Organization_Name.COST_CENTER	Organization[?(@.organizationType=='COST_CENTER')].organizationName	CostCenter
Organization_Data.Worker_Organization_Data.Cost_Center_Reference_ID	['urn:ietf:params:scim:schemas:extension:AdAdditionalData:2.0:User']['WorkDayDataExtension']['departmentNumber']	DepartmentNumber
Organization_Data.Organization_Name.Division	Organization[?(@.organizationType=='Division')].organizationName	Division

Custom Attributes

Additionally, the EmpowerID Workday connector supports inventorying custom attributes from Workday. After creating a Workday account store in EmpowerID, you can enable this functionality by following the procedure outlined in the Inventory Workday Custom Attributes article.

Macrosuite divider macro

dividerWidth	100
dividerType	text-with-icon
emoji	{"id":"smile","name":"Smiling Face with Open Mouth and Smiling Eyes","short_names":["smile"],"colons":":smile:","emoticons":["C:","c:",":D",":-D"],"unified":"1f604","skin":null,"native":"😄"}
textColor	#000000
dividerWeight	3
labelPosition	middle
textAlignment	center
iconColor	#0052CC
fontSize	medium
text	Next Steps
emojiEnabled	false
dividerColor	#DFE1E6
dividerIcon	bootstrap/CloudsFill
dividerColor	#DFE1E6

Connect to Workday

Inventory Workday Custom Attributes

Versions Compared

Old Version 1

New Version 2

Key

Inventory Objects and their corresponding components in EmpowerID

Attribute Mapping

Personal Data

Employment Data

Organization Data

Custom Attributes