The EmpowerID Workday connector supports inventorying custom attributes in Workday using Workday’s Field Overrides Service. This service allows administrators to override default field values with custom values based on specific conditions. It supports inventorying custom attributes in Workday, which can be used to tailor the system to your organization's unique needs.
To leverage this service, it is necessary for Workday administrators to execute several configuration steps. These involve the establishment of a new Field Override Integration System within Workday, populating it with the desired custom attributes, and configuring EmpowerID to utilize this new system when extracting worker data. Additionally, the EmpowerID Schema will need to be extended to accommodate each new custom attribute. This article provides a step-by-step guide on how to accomplish these tasks.
Create a Field Override Service in Workday
Log in to your Workday account as an administrator, search for Integration System, and click Create Integration System.
Enter a name for the service, select Worker as the template, and press Enter.
Select Core Connector: Worker from the list of results and then click OK to create the Integration System.
Click the Add + button under the Custom Integration Services section on the new Integration System page, then click Create.
Select Create Integration Field Override Service from the list of services.
Enter a Name for the Field Override Service, such as “EmpowerID System,” and select Worker as the Business Object:
Add new fields to your Field Override Service by clicking the Add + button.
Configure field mappings by navigating to Actions > Integration System > Configure Integration Field Overrides.
Select your Integration Service and configure the mappings for your fields.
After you have completed mapping the fields, click OK and then click Done.
Search for your Integration System in Workday, then go to Actions > Integration IDs > View IDs.
Copy and save the value of Integration_System_ID. You need this value to update the EmpowerID Workday Microservice to fetch the custom attributes from Workday.
Configure EmpowerID for the Workday Custom Attributes
In order for EmpowerID to sync the custom attributes you created in Workday to users in EmpowerID, you need to extend the EmpowerID schema for each custom attribute. To extend the schema in this way involves the following steps:
Add each custom attribute to the Workday Security Boundary Type
Create a Security Boundary Object Attribute to store each custom attribute in the Account table
Create a Security Boundary Object Attribute for EmpowerID Person of Object Type EmpowerID Account. This maps custom attributes to EmpowerID Accounts.
Create a Security Boundary Object Attribute for EmpowerID Person of Object Type EmpowerID Person. This maps custom attributes to EmpowerID Persons.
Step 1 – Add the Custom Attribute to the Workday Security Boundary Type
Expand Admin > Applications and Directories on the navbar and click Manage Schema.
Select the Security Boundary Attributes tab on the Schema page and then click the Add + button on the grid header.
Enter the following information for the Security Boundary Attribute:
Name – Enter the name of the custom attribute formatted as SCIM as shown below, replacing THE_NAME_OF_THE_CUSTOM_ATTRIBUTE with the actual name of the custom attribute:
['urn:ietf:params:scim:schemas:extension:AdAdditionalData:2.0:User']['WorkDayDataExtension']['customFields']['THE_NAME_OF_THE_CUSTOM_ATTRIBUTE']Attribute Type – String
Directory Data Type – DirectoryString
Security Boundary Type – Select Workday
Object Attribute – Select the desired attribute, such as CustomAttribute1.
Leave the other fields as is and click Save.
Step 2 – Add Security Boundary Object Attribute for the Custom Attribute
Select the Security Boundary Object Attributes tab on the Schema page and then click the Add + button on the grid header.
Enter the following information for the Security Boundary Object Attribute:
Select Existing Attribute – Select the Security Boundary Attribute created above
Object Type – Select user
Select RBAC Object – Select Account
RBAC Object Attribute – Select the value entered for the Object Attribute above, such as “CustomAttribute1.”
Click Save.
Step 3 – Add a Security Boundary Object Attribute for EmpowerID Person of Object Type EmpowerID Account
Select the Security Boundary Object Attributes tab on the Schema page and then click the Add + button on the grid header.
Enter the following information for the Security Boundary Object Attribute:
Select Existing Attribute – Select the Security Boundary Attribute created above
Object Type – Select EmpowerID Account
Click Save.
Step 4 – Add a Security Boundary Object Attribute for EmpowerID Person of Object Type EmpowerID Person
Select the Security Boundary Object Attributes tab on the Schema page and then click the Add + button on the grid header.
Enter the following information for the Security Boundary Object Attribute:
Select Existing Attribute – Select the Security Boundary Attribute created above
Object Type – Select EmpowerID Person
Click Save.
Repeat the above procedure for each custom attribute.
Step 5 – Refresh Attribute Flow Schema for the Workday Account Store
After extending the schema for Workday in EmpowerID, you should refresh the Attribute Flow Schema to ensure the new attributes appear for the Workday account store for quick Attribute Flow mapping.
Expand Admin > Applications and Directories on the navbar and click Account Stores and Systems.
Select the Account Stores tab and click the Refresh Attribute Flow Schema for AccountStore action.
In the Account Store Lookup that appears, search for the Workday account store, click the record for the account store to select it, and then click Submit.
