Workday Connector

The EmpowerID Workday connector is a read-only connector that uses the SCIM 2.0 protocol to allow you to bring the user data from a Workday cloud instance to EmpowerID, where it can be used to provision EmpowerID Persons, and be synchronized with data in any connected back-end user directories.

The Workday connector is an EmpowerID microservice that you deploy to an Azure app service, which in turn retrieves information from Workday. The app service uses a system-assigned managed identity linked to an application you create in Azure AD for EmpowerID. The managed identity is used to allow the Workday microservice to access Azure AD-protected services without needing to supply credentials for authentication. The entire process uses secure client certificate authentication.

Workday Connector Architecture

Inventory Objects and their corresponding components in EmpowerID

Object in Workday	Component in EmpowerID

Object in Workday	Component in EmpowerID
User	Account

Attribute Mapping

The below table shows the attribute mappings of Workday users to EmpowerID.

Workday Attribute	SCIM Attribute	EmpowerID Person Attribute

Workday Attribute	SCIM Attribute	EmpowerID Person Attribute
Country_Reference.ISO_3166-1_Alpha-2_Code	addresses[?@.type=="BUSINESS"].country	Country
Business_Site_Summary_Data.Name	siteName	JobLocationName
Organization_Data.Organization_Name.COST_CENTER	Organization[?(@.organizationType=='COST_CENTER')].organizationName	CostCenter
Organization_Data.Worker_Organization_Data.Cost_Center_Reference_ID	['urn:ietf:params:scim:schemas:extension:AdAdditionalData:2.0:User']['WorkDayDataExtension']['departmentNumber']	DepartmentNumber
Organization_Data.Organization_Name.Division	Organization[?(@.organizationType=='Division')].organizationName	Division
Worker_Data.Worker_ID	urn:ietf:params:scim:schemas:extension:enterprise:2.0:User.EmployeeNumber	EmployeeNumber
Legal_Name_Data.Name_Detail_Data.First_Name	name.givenName	FirstName
Legal_Name_Data.Name_Detail_Data.Middle_Name	name.middleName	MiddleName
Legal_Name_Data.Name_Detail_Data.Last_Name	name.familyName	LastName
Preferred_Name_Data.Name_Detail_Data.First_Name	nickName	PreferredFirstName
Preferred_Name_Data.Name_Detail_Data.Last_Name	preferredLastName	PreferredLastName
Address_Data.Municipality	addresses[?(@.type=='BUSINESS')].locality	City
Country_Region_Descriptor	addresses[?(@.type=='BUSINESS')].region	State
Address_Data.Postal_Code	addresses[?(@.type=='BUSINESS')].postalCode	PostalCode
Address_Data.AddressLineData	addresses[?(@.type=='BUSINESS')].streetAddress	StreetAddress
PhoneData.PhoneNumber.Communicationtype=WORK	phoneNumbers[?(@.type=='work')].value	BusinessPhone
Position_Data.Business_Title	title	Jobtitle
Organization_Data.Organization_Name.COMPANY	Organization[?(@.organizationType=='COMPANY')].organizationName	Company
Worker_Type_Reference.Employee_TypeID	userType	EmployeeType
Worker_Data.User_ID	userName	LogonName
Worker_Status_Data.Active	active	Status
Worker_Status_Data.Hire_Date	hireDate	HireDate
Worker_Status_Data.Termination Date	terminationDate	TerminationDate
Manager_as_of_last_detected_manager_change_Reference. EmployeeID	['urn:ietf:params:scim:schemas:extension:enterprise:2.0:User']['manager']['value']	ManagerPersonID
FirstName, Lastname	displayName	DisplayName
Country_Reference.ISO_3166-1_Alpha-3_Code	addresses[?(@.type=='BUSINESS')].country	Country
Email_Address_Data.Email_Address	emails[?(@.type=='work')].value	Email
PhoneData.PhoneNumber.Communicationtype=FAX	phoneNumbers[?(@.type=='fax')].value	Fax
PhoneData.Phonenumber.Communicationtype=HOMEPHONE	phoneNumbers[?(@.type=='home')].value	HomeTelephone
NumberData.Phonenumber.Communicationtype=MOBILENUMBER	phoneNumbers[?(@.type=='mobile')].value	MobilePhone
PhoneData.Phonenumber.Communicationtype=TELEPHONE	phoneNumbers[?(@.type=='other')].value	Telephone
	name.honorificSuffix	GenerationalSuffix
WorkerData.User_ID	externalId	EmailAlias

Connect to Workday