About the Workday Connector
The EmpowerID Workday Connector enables seamless synchronization of user data from a Workday cloud instance to EmpowerID, utilizing the SCIM 2.0 protocol for provisioning EmpowerID Persons and maintaining data consistency across connected back-end directories.
The connector architecture consists of two core components:
- An EmpowerID microservice deployed on an Azure App Service
- An EmpowerID account store designed for Workday identity synchronization The Azure App Service operates using a system-assigned managed identity linked to an Azure AD application created for EmpowerID. This allows the Workday microservice to securely access Azure AD-protected services without requiring explicit credentials. Client certificate authentication ensures a high level of security throughout the integration.
Inventory Objects and their corresponding components in EmpowerID
Connects to the Human Resource service and retrieves Worker data.
| Object in Workday | Component in EmpowerID |
|---|---|
| Worker | Account |
Attribute Mapping
The table below shows the attribute mappings of Workday users to EmpowerID. Attributes marked with N/A* are supported but are not specifically mapped to corresponding EmpowerID Person Attributes. To map these attributes, the EmpowerID Schema needs to be extended. For information on extending the schema for Workday, see Inventory Workday Custom Attributes.
Personal Data
| Workday Attribute | SCIM Attribute | EmpowerID Person Attribute |
|---|---|---|
| First_Name | name.givenName | FirstName |
| Last_Name | name.familyName | LastName |
| Middle_Name | name.middleName | MiddleName |
| Formatted_Name | displayName | DisplayName |
| CountryOfBirth | AdditionalDataExtension.CountryOfBirth | N/A* |
| Citizenship | AdditionalDataExtension.Citizenship | N/A* |
| Email_Address | emails[?(@.type=='work')].value | |
| PhoneData.PhoneNumber.Communicationtype=FAX | phoneNumbers[?(@.type=='fax')].value | Fax |
| PhoneData.Phonenumber.Communicationtype=HOMEPHONE | phoneNumbers[?(@.type=='home')].value | HomeTelephone |
| NumberData.Phonenumber.Communicationtype=MOBILENUMBER | phoneNumbers[?(@.type=='mobile')].value | MobilePhone |
| PhoneData.PhoneNumber.Communicationtype=WORK | phoneNumbers[?(@.type=='work')].value | BusinessPhone |
Employment Data
| Workday Attribute | SCIM Attribute | EmpowerID Person Attribute |
|---|---|---|
| Worker_Status_Data.Active | active | Status |
| Worker_Status_Data.Original_Hire_Date | hireDate | OriginalHireDate |
| Worker_Status_Data.Hire_Date | hireDate | ExpectedHireDate |
| Worker_Status_Data.Termination_Date | terminationDate | TerminationDate |
| Worker_Status_Data.Rehire | AdditionalDataExtension.RehireFlag | If set to Y, the Person is directed through the Rehire Workflow. |
| Worker_Status_Data.Terminated | Terminated | If set to true this value is used to terminate the Person in EmpowerID. |
| Worker_Status_Data.Hire_Rescinded | HireRescinded | If set to true, accounts linked to the EmpowerID Person are disabled. |
| Worker_Status_Data.Leave_Status_Data | OnLeave | If set to Y, the EmpowerID Person is directed to the On Leave workflow. Accounts can be disabled as needed. |
| Worker_Status_Data.Secondary_Termination_Reasons_Data | TerminationReason | N/A* |
| Worker_Job_Data.Position_Data.Business_Title | Title | Title |
Organization Data
| Workday Attribute | SCIM Attribute | EmpowerID Person Attribute |
|---|
| Workday Attribute | SCIM Attribute | EmpowerID Person Attribute |
|---|---|---|
| Organization_Data.Organization_Name.COST_CENTER | Organization[?(@.organizationType=='COST_CENTER')].organizationName | CostCenter |
| Organization_Data.Worker_Organization_Data.Cost_Center_Reference_ID | ['urn:ietf:params:scim:schemas:extension:AdAdditionalData:2.0:User']['WorkDayDataExtension']['departmentNumber'] | DepartmentNumber |
| Organization_Data.Organization_Name.Division | Organization[?(@.organizationType=='Division')].organizationName | Division |
Custom Attributes
Additionally, the EmpowerID Workday connector supports inventorying custom attributes from Workday. After creating a Workday account store in EmpowerID, you can enable this functionality by following the procedure outlined in the Inventory Workday Custom Attributes article.