Page Comparison

...

• Add each custom attribute to the Workday Security Boundary Type

• Create a Security Boundary Object Attribute to store each custom attribute of Object Type User and map it to the corresponding RBAC Object Attribute in the Account table.

• Create a Security Boundary Object Attribute for EmpowerID Person of Object Type EmpowerID Account. This maps custom attributes to EmpowerID Accounts.

• Create a Security Boundary Object Attribute for EmpowerID Person of Object Type EmpowerID Person. This maps custom attributes to EmpowerID Persons.

...

1. Expand Admin > Applications and Directories on the navbar and click Manage Schema.

2. Select the Security Boundary Attributes tab on the Schema page and then click the Add + button on the grid header.

3. Enter the following information for the Security Boundary Attribute:

   • Name – Enter the name of the custom attribute formatted as SCIM as shown below, replacing THE_NAME_OF_THE_CUSTOM_ATTRIBUTE with the actual name of the custom attribute:
     ['urn:ietf:params:scim:schemas:extension:AdAdditionalData:2.0:User']['WorkDayDataExtension']['customFields']['THE_NAME_OF_THE_CUSTOM_ATTRIBUTE']

   • Attribute Type – String

   • Directory Data Type – DirectoryString

   • Security Boundary Type – Select Workday

   • Object Attribute – Select the desired attribute, such as CustomAttribute1.

4. Leave the other fields as is and click Save.
   

   

Step 2 – Add a Security Boundary Object Attribute

...

of Object Type User

1. Select the Security Boundary Object Attributes tab on the Schema page and then click the Add + button on the grid header.

2. Enter the following information for the Security Boundary Object Attribute:

   • Select Existing Attribute – Select the Security Boundary Attribute created above

   • Object Type – Select user

   • Select RBAC Object – Select Account

   • RBAC Object Attribute – Select the value entered for the Object Attribute above, such as “CustomAttribute1.”

3. Click Save.
   

   

...

1. Expand Admin > Applications and Directories on the navbar and click Account Stores and Systems.

2. Select the Account Stores tab and click the Refresh Attribute Flow Schema for AccountStore action.
   

   

3. In the Account Store Lookup that appears, search for the Workday account store, click the record for the account store to select it, and then click Submit.
   

   

Insert excerpt
IL:External Stylesheet IL:External Stylesheet nopanel true

Step 6 – Configure Attribute Flow for the Custom Attributes

1. Expand Admin > Applications and Directories on the navbar and click Account Stores and Systems.

2. Select the Account Stores tab and search for the Workday account store.

3. Click the Account Store link to navigate to the Account Store Details page for the account store.
   

   Image Added

4. On the Account Store Details page for the Workday account store, select the Attribute Flow Rules tab.

5. Review the attribute flow and revise as needed. EmpowerID translates the attributes in Workday to SCIM for use with the connector and represents those attributes in EmpowerID as External Directory Attributes. You map these attributes to EmpowerID Person attributes to ensure that any changes occurring to user attributes in Workday flow to the EmpowerID Person and any other user accounts owned by the Person.
   

   Image Added

6. To change the score for any of the available CRUD operations (Create, Update, and Delete), enter the new score in the appropriate field. By default, scores are weighted evenly, which means that a change to an attribute originating in one connected external directory has the same authority as a change to an attribute occurring in another connected external directory.