Inventory Workday Custom Attributes

The EmpowerID Workday connector supports inventorying custom attributes in Workday using Workday’s Field Overrides Service. This service allows administrators to override default field values with custom values based on specific conditions. It supports inventorying custom attributes in Workday, which can be used to tailor the system to your organization's unique needs.

To leverage this service, it is necessary for Workday administrators to execute several configuration steps. These involve the establishment of a new Field Override Integration System within Workday, populating it with the desired custom attributes, and configuring EmpowerID to utilize this new system when extracting worker data. Additionally, the EmpowerID Schema will need to be extended to accommodate each new custom attribute. This article provides a step-by-step guide on how to accomplish these tasks.

Create a Field Override Service in Workday

1. Log in to your Workday account as an administrator, search for Integration System, and click Create Integration System.

2. Enter a name for the service, select Worker as the template, and press Enter.

3. Select Core Connector: Worker from the list of results and then click OK to create the Integration System.

4. Click the Add + button under the Custom Integration Services section on the new Integration System page, then click Create.

5. Select Create Integration Field Override Service from the list of services.

6. Enter a Name for the Field Override Service, such as “EmpowerID System,” and select Worker as the Business Object:

7. Add new fields to your Field Override Service by clicking the Add + button.

8. Configure field mappings by navigating to Actions > Integration System > Configure Integration Field Overrides.

9. Select your Integration Service and configure the mappings for your fields.

10. After you have completed mapping the fields, click OK and then click Done.

11. Search for your Integration System in Workday, then go to Actions > Integration IDs > View IDs.

12. Copy and save the value of Integration_System_ID. You need this value to update the EmpowerID Workday Microservice to fetch the custom attributes from Workday.

Configure EmpowerID for the Workday Custom Attributes

In order for EmpowerID to sync the custom attributes you created in Workday to users in EmpowerID, you need to extend the EmpowerID schema for each custom attribute. To extend the schema in this way involves the following steps:

• Add each custom attribute to the Workday Security Boundary Type

• Create a Security Boundary Object Attribute of Object Type User and map it to the corresponding RBAC Object Attribute in the Account table.

• Create a Security Boundary Object Attribute for EmpowerID Person of Object Type EmpowerID Account. This maps custom attributes to EmpowerID Accounts.

• Create a Security Boundary Object Attribute for EmpowerID Person of Object Type EmpowerID Person. This maps custom attributes to EmpowerID Persons.

Step 1 – Add the Custom Attribute to the Workday Security Boundary Type

1. Expand Admin > Applications and Directories on the navbar and click Manage Schema.

2. Select the Security Boundary Attributes tab on the Schema page and then click the Add + button on the grid header.

3. Enter the following information for the Security Boundary Attribute:

   • Name – Enter the name of the custom attribute formatted as SCIM as shown below, replacing THE_NAME_OF_THE_CUSTOM_ATTRIBUTE with the actual name of the custom attribute:
     ['urn:ietf:params:scim:schemas:extension:AdAdditionalData:2.0:User']['WorkDayDataExtension']['customFields']['THE_NAME_OF_THE_CUSTOM_ATTRIBUTE']

   • Attribute Type – String

   • Directory Data Type – DirectoryString

   • Security Boundary Type – Select Workday

   • Object Attribute – Select the desired attribute, such as CustomAttribute1.

4. Leave the other fields as is and click Save.
   
   

   Open

   

Step 2 – Add a Security Boundary Object Attribute of Object Type User

1. Select the Security Boundary Object Attributes tab on the Schema page and then click the Add + button on the grid header.

2. Enter the following information for the Security Boundary Object Attribute:

   • Select Existing Attribute – Select the Security Boundary Attribute created above

   • Object Type – Select user

   • Select RBAC Object – Select Account

   • RBAC Object Attribute – Select the value entered for the Object Attribute above, such as “CustomAttribute1.”

3. Click Save.
   
   

   Open

   

Step 3 – Add a Security Boundary Object Attribute for EmpowerID Person of Object Type EmpowerID Account

1. Select the Security Boundary Object Attributes tab on the Schema page and then click the Add + button on the grid header.

2. Enter the following information for the Security Boundary Object Attribute:

   • Select Existing Attribute – Select the Security Boundary Attribute created above

   • Object Type – Select EmpowerID Account

3. Click Save.
   
   

Step 4 – Add a Security Boundary Object Attribute for EmpowerID Person of Object Type EmpowerID Person

1. Select the Security Boundary Object Attributes tab on the Schema page and then click the Add + button on the grid header.

2. Enter the following information for the Security Boundary Object Attribute:

   • Select Existing Attribute – Select the Security Boundary Attribute created above

   • Object Type – Select EmpowerID Person

3. Click Save.
   
   

Repeat the above procedure for each custom attribute.

Step 5 – Refresh Attribute Flow Schema for the Workday Account Store

After extending the schema for Workday in EmpowerID, you should refresh the Attribute Flow Schema to ensure the new attributes appear for the Workday account store for quick Attribute Flow mapping.

1. Expand Admin > Applications and Directories on the navbar and click Account Stores and Systems.

2. Select the Account Stores tab and click the Refresh Attribute Flow Schema for AccountStore action.
   
   

    

3. In the Account Store Lookup that appears, search for the Workday account store, click the record for the account store to select it, and then click Submit.
   
   

    

Step 6 – Configure Attribute Flow for the Custom Attributes

1. Expand Admin > Applications and Directories on the navbar and click Account Stores and Systems.

2. Select the Account Stores tab and search for the Workday account store.

3. Click the Account Store link to navigate to the Account Store Details page for the account store.
   
   

    

4. On the Account Store Details page for the Workday account store, select the Attribute Flow Rules tab.

5. Review the attribute flow and revise as needed. EmpowerID translates the attributes in Workday to SCIM for use with the connector and represents those attributes in EmpowerID as External Directory Attributes. You map these attributes to EmpowerID Person attributes to ensure that any changes occurring to user attributes in Workday flow to the EmpowerID Person and any other user accounts owned by the Person.
   
   

    

6. To change the score for any of the available CRUD operations (Create, Update, and Delete), enter the new score in the appropriate field. By default, scores are weighted evenly, which means that a change to an attribute originating in one connected external directory has the same authority as a change to an attribute occurring in another connected external directory.