The EmpowerID Workday connector is a read-only connector that uses the SCIM 2.0 protocol to allow you to bring the Connector functions as a bridge, enabling the smooth transition of user data from a Workday cloud instance to EmpowerID, where it can be used to provision EmpowerID Persons, and be synchronized with data in any . Utilizing the SCIM 2.0 protocol, the connector is capable of provisioning EmpowerID Persons and sustaining data synchronization across all connected back-end user directories.
The Workday connector is This connector's architecture comprises two core components: an EmpowerID microservice that you deploy to deployed on an Azure app service, which in turn retrieves and an EmpowerID account store specifically designed for storing and synchronizing identity information from Workday. The Azure app service uses is engineered to function using a system-assigned managed identity linked , which is tied to an application you create in Azure AD application explicitly created for EmpowerID. The managed identity is used to allow This setup enables the Workday microservice to access Azure AD-protected services securely without needing to supply requiring explicit credentials for authentication. The entire process uses secure To ensure a high degree of security throughout this interaction, client certificate authentication is employed.
...
Inventory Objects and their corresponding components in EmpowerID
Connects to the Human Resource service and retrieves Worker data.
Object in Workday | Component in EmpowerID |
---|---|
UserWorker | Account |
Attribute Mapping
The table below table shows the attribute mappings of Workday users to EmpowerID.
...
Workday Attribute
...
SCIM Attribute
...
EmpowerID Person Attribute
...
Country_Reference.ISO_3166-1_Alpha-2_Code
...
addresses[?@.type=="BUSINESS"].country
...
Country
...
Business_Site_Summary_Data.Name
...
siteName
...
JobLocationName
...
Organization_Data.Organization_Name.COST_CENTER
...
Organization[?(@.organizationType=='COST_CENTER')].organizationName
...
CostCenter
...
Organization_Data.Worker_Organization_Data.Cost_Center_Reference_ID
...
['urn:ietf:params:scim:schemas:extension:AdAdditionalData:2.0:User']['WorkDayDataExtension']['departmentNumber']
...
DepartmentNumber
...
Organization_Data.Organization_Name.Division
...
Organization[?(@.organizationType=='Division')].organizationName
...
Division
...
Worker_Data.Worker_ID
...
urn:ietf:params:scim:schemas:extension:enterprise:2.0:User.EmployeeNumber
...
EmployeeNumber
...
Attributes marked with N/A* are supported but are not specifically mapped to corresponding EmpowerID Person Attributes. To map these attributes, the EmpowerID Schema needs to be extended. For information on extending the schema for Workday, see https://dotnetworkflow.jira.com/wiki/spaces/EIDADV23/pages/3176988713/Inventory+Workday+Custom+Attributes#Configure-EmpowerID-for-the-Workday-Custom-Attributes.
Personal Data
Workday Attribute | SCIM Attribute | EmpowerID Person Attribute |
---|---|---|
First_Name | name.givenName | FirstName |
Last_Name |
name.familyName | LastName | |
Middle_Name | name.middleName | MiddleName |
Formatted_Name |
name.familyName
LastName
Preferred_Name_Data.Name_Detail_Data.First_Name
nickName
PreferredFirstName
Preferred_Name_Data.Name_Detail_Data.Last_Name
preferredLastName
PreferredLastName
Address_Data.Municipality
displayName | DisplayName | |
CountryOfBirth | AdditionalDataExtension.CountryOfBirth | N/A* |
Citizenship | AdditionalDataExtension.Citizenship | N/A* |
Email_Address | emails[?(@.type==' |
work')]. |
value |
City
Country_Region_Descriptor
PhoneData.PhoneNumber.Communicationtype=FAX | phoneNumbers[?(@.type==' |
fax')]. |
value |
State
Address_Data.Postal_Code
Fax | |
PhoneData.Phonenumber.Communicationtype=HOMEPHONE | phoneNumbers[?(@.type==' |
home')]. |
value |
PostalCode
Address_Data.AddressLineData
HomeTelephone | |
NumberData.Phonenumber.Communicationtype=MOBILENUMBER | phoneNumbers[?(@.type==' |
mobile')]. |
value |
MobilePhone | ||
PhoneData.PhoneNumber.Communicationtype=WORK | phoneNumbers[?(@.type=='work')].value | BusinessPhone |
Employment Data
Workday Attribute | SCIM Attribute | EmpowerID Person Attribute |
---|---|---|
Worker_Status_Data. |
Active |
active |
Status |
Worker_Status_Data. |
Organization[?(@.organizationType=='COMPANY')].organizationName
Original_Hire_Date | hireDate | OriginalHireDate |
Worker_ |
Status_ |
Data. |
Hire_ |
Date |
hireDate |
ExpectedHireDate |
Worker_Status_Data. |
Termination_ |
Date |
terminationDate |
TerminationDate |
Worker_Status_Data. |
active
Rehire | AdditionalDataExtension.RehireFlag | If set to Y, the Person is directed through the Rehire Workflow. |
Worker_Status_Data.Terminated | Terminated | If set to true this value is used to terminate the Person in EmpowerID. |
Worker_Status_Data.Hire_ |
Rescinded |
hireDate
HireRescinded | If set to true, accounts linked to the EmpowerID Person are disabled. |
Worker_Status_Data. |
terminationDate
TerminationDate
Manager_as_of_last_detected_manager_change_Reference. EmployeeID
['urn:ietf:params:scim:schemas:extension:enterprise:2.0:User']['manager']['value']
ManagerPersonID
FirstName, Lastname
displayName
DisplayName
Country_Reference.ISO_3166-1_Alpha-3_Code
addresses[?(@.type=='BUSINESS')].country
Country
Email_Address_Data.Email_Address
emails[?(@.type=='work')].value
PhoneData.PhoneNumber.Communicationtype=FAX
phoneNumbers[?(@.type=='fax')].value
Fax
PhoneData.Phonenumber.Communicationtype=HOMEPHONE
phoneNumbers[?(@.type=='home')].value
HomeTelephone
NumberData.Phonenumber.Communicationtype=MOBILENUMBER
phoneNumbers[?(@.type=='mobile')].value
MobilePhone
PhoneData.Phonenumber.Communicationtype=TELEPHONE
phoneNumbers[?(@.type=='other')].value
Telephone
name.honorificSuffix
GenerationalSuffix
WorkerData.User_ID
externalId
EmailAlias
Leave_Status_Data | OnLeave | If set to Y, the EmpowerID Person is directed to the On Leave workflow. Accounts can be disabled as needed. |
Worker_Status_Data.Secondary_Termination_Reasons_Data | TerminationReason | N/A* |
Worker_Job_Data.Position_Data.Business_Title | Title | Title |
Organization Data
Workday Attribute | SCIM Attribute | EmpowerID Person Attribute |
---|---|---|
Organization_Data.Organization_Name.COST_CENTER | Organization[?(@.organizationType=='COST_CENTER')].organizationName | CostCenter |
Organization_Data.Worker_Organization_Data.Cost_Center_Reference_ID | ['urn:ietf:params:scim:schemas:extension:AdAdditionalData:2.0:User']['WorkDayDataExtension']['departmentNumber'] | DepartmentNumber |
Organization_Data.Organization_Name.Division | Organization[?(@.organizationType=='Division')].organizationName | Division |
Custom Attributes
Additionally, the EmpowerID Workday connector supports inventorying custom attributes from Workday. After creating a Workday account store in EmpowerID, you can enable this functionality by following the procedure outlined in the Inventory Workday Custom Attributes article.
Macrosuite divider macro | ||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Inventory Workday Custom Attributes
Insert excerpt | ||||||
---|---|---|---|---|---|---|
|